4 matches found
CVE-2015-0968: Undefined Security Weakness
Unrestricted file upload vulnerability in admin/uploadImage.html in SearchBlox before 8.2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension and the image/jpeg content type, a different vulnerability than CVE-2013-3590...
PT-2015-4994
Name of the Vulnerable Software and Affected Versions SearchBlox versions prior to 8.2 Description The issue is related to an unrestricted file upload vulnerability. This allows remote attackers to execute arbitrary code by uploading a file with an executable extension and the image/jpeg content...
CVE-2013-3590: Undefined Security Weakness
Unrestricted file upload vulnerability in admin/uploadImage.html in SearchBlox before 7.5 build 1 allows remote attackers to execute arbitrary code by uploading an executable file with the image/jpeg content type, and then accessing this file via unspecified vectors, as demonstrated by access to ...
PT-2013-4500
Name of the Vulnerable Software and Affected Versions SearchBlox versions prior to 7.5 build 1 Description The issue allows remote attackers to execute arbitrary code by uploading an executable file with the content type set to image/jpeg to the admin/uploadImage.html endpoint, and then accessing...