Immunity Canvas: JQUERY_FILE_UPLOAD

Name| jqueryfileupload ---|--- CVE| CVE-2018-9206 Exploit Pack| CANVAS Description| Blueimp jQuery-File-Upload Arbitrary Upload Notes| CVE Name: CVE-2018-9206 VENDOR: Notes: The exploit tests different paths on the target server Repeatability: Infinite References:...

Remote code execution

The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated remote code execution due to a default component that permits arbitrary upload of PHP files, because the formmailer widget blocks .php files but not .php5 or .phtml files. This is related t...

Insteon Hub MPFS Upload Firmware Update Vulnerability(CVE-2018-3832)

Summary An exploitable firmware update vulnerability exists in Insteon Hub running firmware version 1013. The HTTP server allows for uploading arbitrary MPFS binaries that could be modified to enable access to hidden resources which allow for uploading unsigned firmware images to the device. To...

PHP Login & User Management Code Execution Vulnerability

PHP Login & User Management is a set of PHP and MySQL based website user login and registration management script. An arbitrary file upload vulnerability exists in the /classes/profile.class.php file in versions of PHP Login & User Management prior to 4.1.1. A remote attacker can exploit this...

Code injection

site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PHP code because the BigTreeStorage class in core/inc/bigtree/apis/storage.php does not prevent uploads of .htaccess files...

Joomla! Proclaim Arbitrary File Upload Vulnerability

Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search, etc. Proclaim is used in one of the support for online learning and watch multimedia content components. An arbitrary file upload vulnerability...

FiyoCMS save_file.php file has an arbitrary file upload vulnerability

FiyoCMS is a content management system CMS for creating CMS templates. An arbitrary file upload vulnerability exists in the FiyoCMS savefile.php file. An attacker can exploit this vulnerability to upload malicious files and gain server privileges...

CVE-2017-17874

Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product preview" action, which can make a .php file accessible under a uploads/ URI...

CVE-2017-17874

Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product preview" action, which can make a .php file accessible under a uploads/ URI...

Ingenious School Management System my_profile.php File Arbitrary File Upload Vulnerability

Ingenious School Management System is a web-based school management system. The system supports adding courses, posting grades and managing teachers. A security vulnerability exists in the myprofile.php file in Ingenious School Management System version 2.3.0. An attacker can exploit this...

Trend Micro Mobile Security Arbitrary File Upload Vulnerability

Trend Micro Mobile Security Enterprise is a set of cell phone security software from Trend Micro, Inc. that integrates cell phone security scanning, real-time protection against malicious programs and monitoring of malicious behavior. An arbitrary file upload vulnerability exists in versions of...

File upload vulnerability in Ueditor editor .net version

UEditor is developed by Baidu web front-end R & D WYSIWYG rich text web editor , with lightweight , customizable , focus on user experience and other features . The .net version of Ueditor editor has an arbitrary file upload vulnerability, which allows attackers to upload files in a...

Easy File Uploader Remote Shell Upload

Exploit Title: Easy File Uploader - Arbitrary File Upload Date: 27/04/2017 Exploit Author: Daniel Godoy Vendor Homepage: https://codecanyon.net/ Software Link: https://codecanyon.net/item/easy-file-uploader-php-multiple-uploader-with-file-manager/17222287 Tested on: GNU/Linux GREETZ: Rodrigo...

PHPCMS V9.6 WAP Module Arbitrary File Upload Vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. PHPCMS V9.6 WAP module is not strict in filtering file extensions uploaded by front-end users, resulting in an arbitrary file...

Arbitrary File Upload Vulnerability in SignName Parameter of Tibco Call Center System

The core of Tibco's call center system is a communication-based system for internal and external corporate communication. An arbitrary file upload vulnerability exists in the signName parameter of the Tibus Communication Call Center System. 1 File upload: /sysmaint/import/import.php, save...

Multiple Vulnerabilities in iStArtApp FileXChange

FileeXChange is a handy file manager for iPhone, iPod Touch and iPad. iStArtApp FileXChange suffers from file include, arbitrary file upload, local command, and path injection vulnerabilities. Allows remote attackers to compromise a web application or mobile device with unauthorized requests...

OIC Exponent CMS Arbitrary File Upload Vulnerability

OIC Exponent CMS is a free, open source, modular PHP-based content management system CMS from the OIC Group of companies in the United States. An arbitrary file upload vulnerability exists in OIC Exponent CMS version 2.3.8 and below, which can be exploited by attackers to upload backdoor files...

TRS WCM 文件路径处理不当导致任意文件上传

No description provided by source...

h5ai arbitrary file upload vulnerability

h5ai is a software developer Lars Jung developed a set of HTTP Web server for creating file indexing software. An arbitrary file upload vulnerability exists in versions of h5ai prior to 0.25.0. A remote attacker can exploit this vulnerability by uploading an executable file and sending a direct...

Nibbleblog Arbitrary File Upload Vulnerability

NibbleBlog is a set of blogging engines. An arbitrary file upload vulnerability exists in the My Image plugin for Nibbleblog versions prior to 4.0.3. A remote attacker can exploit this vulnerability by uploading an executable file and sending a direct request to access the file to execute arbitra...