WordPress User Photo Component - Remote File Upload

Remote file upload vulnerability was found in this plugin. When photo is uploaded, it is validated only partially. There is a possibility to upload a backdoor on the server hosting WordPress and it can be executed independently from that if the photo has not been yet approved. Also, there is a...

WordPress User Photo Component Remote File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress User Photo Component Remote File Upload Vulnerability Google Dork: inurl:"/wp-content/uploads/userphoto/" Date: 17/FEB/2011 Author: ADVtools Software Link: http://wordpress.org/extend/plugins/user-photo/ Version: 0.9.4...

WordPress User Photo Component Shell Upload

WordPress User Photo Component Remote File Upload Vulnerability Product Name: User Photo Vendor: http://wordpress.org/extend/plugins/user-photo/ Versions Affected: 0.9.4 and probably previous versions Severity: High Credit: Sebastien Andrivet, Flora Bottaccio, ADVtools.com Website:...

WordPress Plugin User Photo Component - Arbitrary File Upload

Exploit Title: WordPress User Photo Component Remote File Upload Vulnerability Google Dork: inurl:"/wp-content/uploads/userphoto/" Date: 17/FEB/2011 Author: ADVtools Software Link: http://wordpress.org/extend/plugins/user-photo/ Version: 0.9.4 Tested on: nix , Windows I. Product Description User...

MyWeight 1.0 - Arbitrary File Upload

MyWeight 1.0 - Arbitrary File Upload ======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script :MyWeight 1.0 Shell Upload Vulnerability + D0rk : Powered By phplemon.com + Script...

MyWeight 1.0 Remote Shell Upload Vulnerability

Exploit for unknown platform in category web applications ============================================== MyWeight 1.0 Remote Shell Upload Vulnerability ============================================== ======================================================= +++++++++++++++++++ information...