CVE-2021-36532: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition vulnerability discovered in portfolioCMS 1.0 allows remote attackers to run arbitrary code via fileExt parameter to localhost/admin/uploads.php...

CVE-2021-36532

Race condition vulnerability discovered in portfolioCMS 1.0 allows remote attackers to run arbitrary code via fileExt parameter to localhost/admin/uploads.php...

PT-2022-18772

Name of the Vulnerable Software and Affected Versions Atom.CMS version 2.0 Description The issue is related to SQL Injection via the Atom.CMS admin uploads.php file. Recommendations For Atom.CMS version 2.0, as a temporary workaround, consider restricting access to the Atom.CMS admin uploads.php...

CVE-2022-25487

Atom CMS v2.0 was discovered to contain a remote code execution RCE vulnerability via /admin/uploads.php...

CVE-2022-25487: Unrestricted Upload of File with Dangerous Type

Atom CMS v2.0 was discovered to contain a remote code execution RCE vulnerability via /admin/uploads.php...

PT-2022-17322

Name of the Vulnerable Software and Affected Versions Atom CMS version 2.0 Description A remote code execution RCE issue was discovered in Atom CMS via the /admin/uploads.php endpoint. This allows for potential code execution on the server. Recommendations For Atom CMS version 2.0, as a temporary...

CVE-2014-4852

CVE-2014-4852 describes an SQL injection in The Digital Craft AtomCMS, in the file admin/uploads.php (likely around version 2.0). The vulnerability allows remote attackers to manipulate the database by supplying an arbitrary SQL command via the id parameter, as documented in multiple feeds (NVD, ...

PT-2014-6166

Name of the Vulnerable Software and Affected Versions The Digital Craft AtomCMS version 2.0 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the admin/uploads.php file. Recommendations For version 2.0, update the admin/uploads.php...

CVE-2014-4852: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/uploads.php in The Digital Craft AtomCMS, possibly 2.0, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-6878

admin/uploads.php in PHP-Update 2.7 and earlier allows remote attackers to gain privileges by setting the rights7 parameter to 1 during a login action...

CVE-2006-6879: Undefined Security Weakness

Unrestricted file upload vulnerability in admin/uploads.php in PHP-Update 2.7 and earlier allows remote authenticated users to upload arbitrary PHP scripts to the gfx/ and files/ directories via the userfile parameter...

CVE-2006-6878: Undefined Security Weakness

admin/uploads.php in PHP-Update 2.7 and earlier allows remote attackers to gain privileges by setting the rights7 parameter to 1 during a login action...

PHP-Update <= 2.7 (admin/uploads.php) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl rgod u fucking little piece of shit faggot. way to ruin a private exploit, scumbag use strict; use IO::Socket; use MIME::Base64; use Getopt::Std; my $app = "PHP-Update 2.7"; my $type = "Remote Code Execution"; my $author = "undefined1"; my $date =...