FreePBX 13 / 14 - Remote Command Execution / Privilege Escalation

Exploit for linux platform in category remote exploits !/usr/bin/env python -- coding, latin-1 -- DESCRIPTION FreePBX 13 remote root 0day - Found and exploited by pgt @ nullsecurity.net AUTHOR pgt - nullsecurity.net DATE 8-12-2016 VERSION freepbx0day.py 0.1 AFFECTED VERSIONS FreePBX 13 & 14 Syste...

Tequila File Hosting 1.5 Shell Upload

================================================================================ Tequila File Hosting Unrestricted File Upload ================================================================================ Vendor Homepage: http://codecanyon.net/item/tequila-file-hosting-script/7604312 Date:...

WordPress Powerplay Gallery Plugin Arbitrary File Upload Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL server set up a personal blog site.Powerplay Gallery is one of the gallery plug-ins for displaying images. An arbitrary file upload vulnerability exists ...

WordPress wp-powerplaygallery plugin 'upload.php' has multiple SQL injection vulnerabilities

WordPress is a blogging platform developed using the PHP language. WordPress wp-powerplaygallery plugin version 3.3 and earlier, there are multiple sql injection vulnerabilities in the implementation of upload.php, which can be exploited by an attacker to access or modify data, etc...

Ckeditor 4.4.7 Shell Upload / Cross Site Scripting

----------------------------------------- 0-DAY Aint DIE | No Priv8 | KedAns-Dz ----------------------------------------- ---------------------------- K |................| . h |.......................| A a |.......................| N l |.....................| S E |.......................| e D...

HelpDEZk 1.0.1 Unrestricted File Upload Vulnerability

HelpDEZk version 1.0.1 suffers from a remote unrestricted file upload vulnerability. Product: HelpDEZk Vendor: HelpDEZk Vulnerable Versions: 1.0.1 and probably prior Tested Version: 1.0.1 Advisory Publication: October 15, 2014 without technical details Vendor Notification: October 15, 2014 Public...

Arbitrary File Upload in HelpDEZk

High-Tech Bridge Security Research Lab discovered vulnerability in HelpDEZk, which can be exploited to compromise vulnerable web site. 1 Unrestricted Upload of File with Dangerous Type in HelpDEZk: CVE-2014-8337 The vulnerability exists due to absence of validation of file extensions when uploadi...

Image_Upload Script 2.0 - Multiple Remote File Include Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/23132/info ImageUpload Script is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...

Bilder Upload Script - Datei Upload 1.09 - Remote Shell Upload Vulnerability

No description provided by source. InformatioN Homepage: http://www.joomlaservice.info Or http://www.dz4all.com Vendor : http://www.php-space.info/bilder-upload-script/ Download: http://www.php-space.info/bilder-upload-script/bilder-upload-script1.09.rar Email : [email protected] Dork :...

Sava’s Simple Upload Script / Delete Arbitrary File

Exploit for php platform in category web applications Exploit Title: Sava’s Simple Upload Script / Delete Arbitrary File Date: 03/07/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Sofware web:...

Symantec Web Gateway 5.0.2.8 Multiple Vulnerabilities

Exploit for linux platform in category web applications Software: Symantec Web Gateway Current Software Version: 5.0.2.8 Product homepage: www.symantec.com Author: S2 Crew Hungary CVE: CVE-2012-0297, CVE-2012-0298, ??? File include:...

chevreto_XSS_file_existence_enum_vulns

======================================================================================== Vulnerable Software: Chevereto upload script Downloaded from: http://code.google.com/p/chevereto/downloads/list http://code.google.com/p/chevereto/downloads/detail?name=cheveretonb1.91.zip&can=2&q= Official...

Chevereto Upload Script suffers from cross site scripting and user enumeration vulnerabilities.

======================================================================================== Vulnerable Software: Chevereto upload script Downloaded from: http://code.google.com/p/chevereto/downloads/list http://code.google.com/p/chevereto/downloads/detail?name=cheveretonb1.91.zip&can=2&q= Official...

Chevereto 1.91 - '/Upload/engine.php?v' Cross-Site Scripting

source: https://www.securityfocus.com/bid/53448/info Chevereto Image Upload Script is prone to a cross-site scripting vulnerability and an information-disclosure vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker m...

Kleeja Upload Script remote read config Vulnerability

Exploit for php platform in category web applications ===================================================== Kleeja Upload Script remote read config Vulnerability ===================================================== + Author : ali.erroor Contact : email protected HomePage :...

Datei Upload Script 1.09 Remote Shell Upload

InformatioN Title : Datei Upload Script v 1.09 Remote file upload Vulnerability Author : Mr.Benladen version : 1.09 Homepage: http://www.joomlaservice.info Or http://www.dz4all.com Vendor : http://www.php-space.info/bilder-upload-script/ Download:...

Bilder Upload Script - Datei Upload v1.09 Remote Shell Upload

Exploit for php platform in category web applications =========================================================================== Bilder Upload Script - Datei Upload v1.09 Remote Shell Upload Vulnerability =========================================================================== Homepage:...

Maxs File Uploader - Arbitrary File Upload

Maxs File Uploader - Arbitrary File Upload in the name of allah Exploit Title: Max's File Uploader Date: 15/1/2010 Author:S2K9 Site: www.soqor.net , www.xp10.me Software Link: http://www.phpf1.com/product/file-upload-script.html Tested on: windows xp sp2 Dork : use your head exploit : add u r she...

Max's File Uploader Shell Upload Vulnerability

Exploit for unknown platform in category web applications ============================================== Max's File Uploader Shell Upload Vulnerability ============================================== in the name of allah Exploit Title: Max's File Uploader Date: 15/1/2010 Author:S2K9 Site:...

Saibal Download Area 2.0 - Arbitrary File Upload

======================================================================================== | Title : SAIBAL DOWNLOAD AREA V.2.0 Upload Shell Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | EDB-ID :...