CVE-2023-28158: Improper Neutralization of Input During Web Page Generation

Privilege escalation via stored XSS using the file upload service to upload malicious content. The issue can be exploited only by authenticated users which can create directory name to inject some XSS content and gain some privileges such admin user...

CVE-2021-34685

UploadService in Hitachi Vantara Pentaho Business Analytics through 9.1 does not properly verify uploaded user files, which allows an authenticated user to upload various files of different file types. Specifically, a .jsp file is not allowed, but a .jsp. file is allowed and leads to remote code...

Pentaho Business Analytics / Pentaho Business Server 9.1 Filename Bypass

Product: Pentaho Business Analytics / Pentaho Business Server Vendor / Manufacturer: Hitachi Vantara Affected Versions: = 9.1 Vulnerability Type: Bypass of Filename Extension Restrictions Solution Status: Fix Released on public GitHub repository Manufacturer Notification: June 2021 Public...

CVE-2020-21787

CRMEB 3.1.0+ is vulnerable to File Upload Getshell via /crmeb/crmeb/services/UploadService.php...

we7cms file upload vulnerability

we7cms is a content management system based on asp.net development. we7cms V3.0 system file upload vulnerability, the vulnerability is mainly caused by information leakage of the background upload service exposure, the uploaded service failed to get the identity verification, and the file format...

CVE-2007-0497

PHP remote file inclusion vulnerability in upload/top.php in Upload-Service 1.0, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the maindir parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in upload/top.php in Upload-Service 1.0, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the maindir parameter...

CVE-2007-0497

PHP remote file inclusion vulnerability in upload/top.php in Upload-Service 1.0, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the maindir parameter...

CVE-2007-0497

CVE-2007-0497 describes a PHP remote file inclusion in Upload-Service 1.0. The vulnerability is in upload/top.php when register_globals is enabled, allowing a remote attacker to execute arbitrary PHP code by supplying a URL in the maindir parameter. The CVSS-base score is 6.8 (Medium) with networ...

CVE-2007-0497: Undefined Security Weakness

PHP remote file inclusion vulnerability in upload/top.php in Upload-Service 1.0, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the maindir parameter...

[ECHO_ADV_62$2007] Upload Service 1.0 remote file inclusion

-------------------------------------------------- ECHOADV62$2007 Upload Service 1.0 remote file inclusion -------------------------------------------------- Author : Ahmad Muammar W.K a.k.a y3dips Date Found : January, 21st 2007 Location : Indonesia, Jakarta web :...

Echo Security Advisory 2007.62

-------------------------------------------------- ECHOADV62$2007 Upload Service 1.0 remote file inclusion -------------------------------------------------- Author : Ahmad Muammar W.K a.k.a y3dips Date Found : January, 21st 2007 Location : Indonesia, Jakarta web :...

Upload Service 1.0 - 'top.php?maindir' Remote File Inclusion

------------------------------------------------------------------------------------ ECHOADV62$2007 Upload Service 1.0 remote file inclusion ------------------------------------------------------------------------------------ Author : Ahmad Muammar W.K a.k.a y3dips Date Found : January, 21st 2007...

Upload Service 1.0 - top.php?maindir Remote File Inclusion

Upload Service 1.0 - top.php?maindir Remote File Inclusion ------------------------------------------------------------------------------------ ECHOADV62$2007 Upload Service 1.0 remote file inclusion ------------------------------------------------------------------------------------ Author : Ahm...

Upload Service 1.0 (top.php maindir) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Upload Service 1.0 top.php maindir Remote File Inclusion Vulnerability ========================================================================...

Rio Karma MP3 Player File Upload Service Detection

The remote device seems to be a Rio Karma MP3 player, running the Rio Kama file upload service. Make sure the use of such network devices are done in accordance with your corporate security policy. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...