xoops tad_uploader模块上传漏洞

Xoops是非常流行的动态web内容管理系统，用面向对象的PHP编写。 xoops taduploader模块catsn参数为空格时可以任意上传文件至uploads/taduploader/目录。 Xoops 2.4.3 厂商补丁： Xoops ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://xoops.sourceforge.net/ FORM action='http://URL/modules/taduploader/index.php' method='POST'...

Uploader 0.1.5 Cross Site Request Forgery / Shell Upload

======================================================================================== | Title : Uploader 0.1.5 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Script : Powered by Uploader 0.1.5 | Tested on: windows SP2 Français V.Pnx2 2.0...

Digital College 1.0 Arbitrary Upload

======================================================================================== | Title : Digital College 1.0 upload Vulnerability | Author : indoushka | email : [email protected] | Dork : Powered by Digital College 1.0 - Magtrb Soft 2010 | Tested on: windows SP2 Français V.Pnx2 2.0 ...

Digital Upload 1.0 Shell Upload

======================================================================================== | Title : Digital College 1.0 upload Vulnerability | Author : indoushka | email : [email protected] | Dork : Powered by Digital College 1.0 - Magtrb Soft 2010 | Tested on: windows SP2 Français V.Pnx2 2.0 ...

Uploader v0.1.5 Multiple Vulnerabilities

Exploit for php platform in category web applications ======================================== Uploader v0.1.5 Multiple Vulnerabilities ======================================== ======================================================================================== | Title : Uploader 0.1.5 Mullti...

Uploader 0.1.5 - Multiple Vulnerabilities

Uploader 0.1.5 - Multiple Vulnerabilities ======================================================================================== | Title : Uploader 0.1.5 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Script : Powered by Uploader 0.1.5 |...

Digital College 1.0 - Arbitrary File Upload

Digital College 1.0 - Arbitrary File Upload ======================================================================================== | Title : Digital College 1.0 upload Vulnerability | Author : indoushka | email : [email protected] | Dork : Powered by Digital College 1.0 - Magtrb Soft 2010 |...

Uploader 0.1.5 - Multiple Vulnerabilities

======================================================================================== | Title : Uploader 0.1.5 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Script : Powered by Uploader 0.1.5 | Tested on: windows SP2 Français V.Pnx2 2.0...

Digital College 1.0 - Arbitrary File Upload

======================================================================================== | Title : Digital College 1.0 upload Vulnerability | Author : indoushka | email : [email protected] | Dork : Powered by Digital College 1.0 - Magtrb Soft 2010 | Tested on: windows SP2 Français V.Pnx2 2.0 ...

Facebook Photo Uploader 4 - ActiveX Control Buffer Overflow (Metasploit)

$Id: facebookextractiptc.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Directory traversal

Directory traversal vulnerability in api/downloadchecker.php in MegaLab The Uploader 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

CVE-2009-4816

Directory traversal vulnerability in api/downloadchecker.php in MegaLab The Uploader 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

Unrestricted file upload

Unrestricted file upload vulnerability in Element-IT Ultimate Uploader 1.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in upload/...

CVE-2009-4817

CVE-2009-4817 : Affected product is Element-IT Ultimate Uploader 1.3. The issue is an unrestricted file upload vulnerability that allows remote attackers to execute arbitrary code by uploading a file with an executable extension and then accessing it via a direct request to the file in the upload...

CVE-2009-4816

CVE-2009-4816 describes a directory traversal vulnerability in MegaLab The Uploader 2.0, exploitable through the filename parameter in api/download_checker.php where “..” can be used to read arbitrary files. Affected: MegaLab The Uploader 2.0 (component: api/download_checker.php). Root cause: imp...

CVE-2009-4816

Directory traversal vulnerability in api/downloadchecker.php in MegaLab The Uploader 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

CVE-2009-4817

Unrestricted file upload vulnerability in Element-IT Ultimate Uploader 1.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in upload/...

phpBB2 Files Uploader Mod <= 0.1.5 Shell Upload Vulnerability

Exploit for php platform in category web applications ============================================================= phpBB2 Files Uploader Mod Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 ...

Image-Uploader Shell Upload Vulnerability

Exploit for php platform in category web applications ========================================= Image-Uploader Shell Upload Vulnerability ========================================= Author: Mr.MLL Published: 2010-04-17 Verified: yes Download Exploit Code Download N/A ========= Software :...

Uploader 0.7 Shell Upload

Exploit Title: Uploader 0.7 Shell Upload Vulnerability Date: 16.04.2010 Author: DigitALL Software Link: http://www.paehl.de/ Version: 0.7 Code : g00gle d0rk: "File viewer for Uploader" 3xpl0it: Your Shell shell.php.jpg And Upload Site. And Go to /view.php Your Shell Link Click And Go To Shell...