SyntaxCMS 'upload.php'任意文件上传漏洞

BUGTRAQ ID: 29422 CNCAN ID：CNCAN-200805304 SyntaxCMS是一款基于PHP的内容管理程序。 SyntaxCMS不正确处理用户提交的文件，远程攻击者可以利用漏洞上传任意文件，并以WEB权限执行。 问题存在于'/public/fckeditor/editor/filemanager/upload/php/upload.php'脚本中，默认的脚本配置可导致恶意攻击者上传包含PHP代码的任意文件，并以WEB权限执行。 SyntaxCMS 1.3 目前没有详细解决方案提供： http://www.syntaxcms.org/ ?php /...

La-Nai CMS <= 1.2.16 (fckeditor) Arbitrary File Upload Exploit

No description provided by source. ?php / -------------------------------------------------------------- La-Nai CMS = 1.2.16 fckeditor Arbitrary File Upload Exploit -------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...

Sql injection

SQL injection vulnerability in upload.php in Coppermine Photo Gallery CPG 1.4.16 and earlier allows remote authenticated users or user-assisted remote HTTP servers to execute arbitrary SQL commands via the Content-Type HTTP response header provided by the HTTP server that is used for an upload...

CVE-2008-1840: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in upload.php in Coppermine Photo Gallery CPG 1.4.16 and earlier allows remote authenticated users or user-assisted remote HTTP servers to execute arbitrary SQL commands via the Content-Type HTTP response header provided by the HTTP server that is used for an upload...

Coppermine Photo Gallery upload.php文件SQL注入漏洞

BUGTRAQ ID: 28766 Coppermine是用PHP编写的多用途集成web图形库脚本。 Coppermine的upload.php文件处理用户请求数据时存在输入验证漏洞，远程攻击者可能利用此漏洞执行SQL注入攻击。 在执行URI/URL上传时Coppermine的upload.php文件没有正确地过滤远程HTTP服务器的MIME媒体类型输入，这允许远程攻击者通过操控SQL查询请求执行SQL注入攻击。 Coppermine Photo Gallery 1.4.16 临时解决方法： 在upload.php文件中找到以下行： else // We will try to get...

CVE-2008-1273

CVE-2008-1273 concerns multiple XSS vulnerabilities in imageVue 1.7. The affected functionality is in the upload directory, with vulnerable entry points at popup.php, test/dir2.php, admin/upload.php, and dirxml.php. The underlying issue is that the path parameter is not properly sanitized, enabli...

CVE-2008-1273: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in imageVue 1.7 allow remote attackers to inject arbitrary web script or HTML via the path parameter to 1 popup.php, 2 test/dir2.php, 3 admin/upload.php, and 4 dirxml.php in upload/. NOTE: the provenance of this information is unknown; the details...

Mini File Host 1.2.1 (upload.php language) Local File Inclusion Exploit

No description provided by source. !/usr/bin/perl Name: Mini File Host 1.2.1 "Security Fixed release" and earlier Vulnerability type: Local File Inclusion through POST requests pages/upload.php Authors: Scary-Boys: original GET-vulnerability, 2008-01-17 shinmai: POST-request vulnerability in late...

Mini File Host 1.2.1 - 'language' Local File Inclusion

!/usr/bin/perl Name: Mini File Host 1.2.1 "Security Fixed release" and earlier Vulnerability type: Local File Inclusion through POST requests pages/upload.php Authors: Scary-Boys: original GET-vulnerability, 2008-01-17 shinmai: POST-request vulnerability in latest version perl POC, 2008-01-19...

Mini File Host 1.2 (upload.php language) LFI Vulnerability

No description provided by source. Mini File Host = 1.2 Local File Inclusion Vulnerability AUTHOR : Scary-Boys HOME : http://scary-boys.com Download : http://galaxyscripts.com/forum/downloads.php?do=file&id=1 DorKs : "Powered By Mini File Host V1.2" EXPLOIT :...

CVE-2008-0357: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in pages/upload.php in Galaxyscripts Mini File Host 1.2.1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter...

Mini File Host 1.2 (upload.php language) LFI Vulnerability

Exploit for unknown platform in category web applications ========================================================== Mini File Host 1.2 upload.php language LFI Vulnerability ========================================================== Mini File Host = 1.2 Local File Inclusion Vulnerability AUTHOR :...

CVE-2007-6650: Undefined Security Weakness

Unrestricted file upload vulnerability in fisheye/upload.php in Bitweaver R2 CMS allows remote attackers to upload arbitrary files by using the image/gif content type, and possibly other image and PDF content types, as demonstrated by uploading a .htaccess file...

CVE-2007-5736: Improper Input Validation

Unrestricted file upload vulnerability in upload.php in SeeBlick 1.0 Beta allows remote attackers to upload arbitrary files via unspecified vectors. NOTE: these files are stored with .html extensions, so the scope of the attack might be limited to resource consumption and possibly XSS...

CVE-2007-5733: Improper Input Validation

Unrestricted file upload vulnerability in upload/upload.php in Japanese PHP Gallery Hosting, when Open directory mode is enabled, allows remote attackers to upload and execute arbitrary PHP code via a ServerPath parameter specifying a filename with a double extension. NOTE: some of these details...

CVE-2003-1489

Affected software: Truegalerie 1.0. Vulnerable component/flow: upload.php and the file cookie mechanism in form.php, which lets an attacker specify a target filename to read arbitrary files via the image gallery download path. Root cause: handling of filename via a file cookie without proper acce...

CVE-2003-1489: Improper Authentication

upload.php in Truegalerie 1.0 allows remote attackers to read arbitrary files by specifying the target filename in the file cookie in form.php, then downloading the file from the image gallery...

CVE-2007-5307

Technical details about CVE-2007-5307 are not publicly available in the provided connected documents. Please monitor for updates on affected software, impact and remediation.

CVE-2007-5307: Improper Control of Generation of Code

ELSEIF CMS Beta 0.6 does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to execute arbitrary PHP code by uploading a .php file via externe/swfupload/upload.php. NOTE: it coul...

CVE-2007-4761: Improper Input Validation

Unrestricted file upload vulnerability in upload.php in Barbo91 1.1 allows remote attackers to upload and execute arbitrary code via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...