yoyaku_v41 vulnerable to arbitrary file creation

Overview yoyakuv41 provided by Webservice-DIC is a software to manage conference room reservations. yoyakuv41 contains a vulnerability that may allow a remote attacker to create arbitrary files CWE-20. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

CVE-2015-2977: Improper Input Validation

Webservice-DIC yoyakuv41 allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via unspecified vectors...

JVN#46674982: yoyaku_v41 vulnerable to arbitrary file creation

yoyakuv41 provided by Webservice-DIC is a software to manage conference room reservations. yoyakuv41 contains a vulnerability that may allow a remote attacker to create arbitrary files CWE-20. Impact An arbitrary file created by an attacker may result in arbitrary code being executed on the serve...

PT-2015-6024

Name of the Vulnerable Software and Affected Versions Webservice-DIC yoyaku version v41 Description The issue allows remote attackers to create arbitrary files and consequently execute arbitrary code via unspecified vectors. Recommendations For Webservice-DIC yoyaku version v41, at the moment,...

PT-2015-5215

Name of the Vulnerable Software and Affected Versions LXC versions 1.1.2 and earlier Description The issue allows local users to create arbitrary files via a symlink attack on /run/lock/lxc/. Recommendations For LXC versions 1.1.2 and earlier, at the moment, there is no information about a newer...

WordPress Easy2Map Photos Plugin Directory Traversal Vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their own websites on servers that support PHP and MySQL databases.Easy2Map Photos is a tool for generating geotagged photo galleries. A directory traversal vulnerability exists in the WordPress Easy2Map...

PT-2015-6642

Name of the Vulnerable Software and Affected Versions Easy2Map plugin versions prior to 1.2.5 Description The issue allows remote attackers to create arbitrary files via a .. dot dot in the map id parameter in the includes/MapPinImageSave.php file. Recommendations For versions prior to 1.2.5,...

CVE-2015-4616: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.2.5 for WordPress allows remote attackers to create arbitrary files via a .. dot dot in the mapid parameter...

JVN#24336273: BloBee vulnerable to arbitrary file creation

BloBee provided by CGI RESCUE is a bulletin board software. BloBee contains a vulnerability that may allow a remote attacker to create arbitrary files CWE-20. Impact An arbitrary file created by an attacker may result in arbitrary code being executed on the server. Solution Update the Software...

Oracle WebCenter Forms Recognition Sssplt30.ocx Arbitrary File Creation - Ver2 (CVE-2012-1710)

A directory traversal vulnerability has been reported in Oracle WebCenter Forms Recognition. The vulnerability is due to insufficient validation of parameters used in a certain method in the Sssplt30 ActiveX control. A remote attacker can exploit this vulnerability by enticing a target user to op...

WordPress SEO Watcher Plugin - Arbitrary File Creation

This plugin is prone to an open flash chart arbitrary file creation. Solution Update the plugin...

WordPress SlimStat Ex Plugin - Arbitrary File Creation

This plugin is prone to an open flash chart arbitrary file creation vulnerability. Solution Update the plugin...

WordPress SlimStat Ex Plugin - Arbitrary File Creation

This plugin is prone to an open flash chart arbitrary file creation vulnerability. Solution Update the plugin...

Zentao 6.x /module/editor/control.php 任意文件创建漏洞

No description provided by source...

EasyCTF vulnerable to arbitrary file creation

Overview EasyCTF is a server side CGI used to score CTF Capture The Flag. EasyCTF contains a vulnerability that may allow a remote attacker to create arbitrary files CWE-22. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

JVN#67520407: EasyCTF vulnerable to arbitrary file creation

EasyCTF is a server side CGI used to score CTF Capture The Flag. EasyCTF contains a vulnerability that may allow a remote attacker to create arbitrary files CWE-22. Impact An arbitrary file created by an attacker may result in arbitrary code being executed on the server. Solution Update the...

Hikvision iVMS-8700 Tomcat 任意文件创建漏洞

No description provided by source...

Samsung Security Manager ActiveMQ Broker Service PUT Method Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Security Manager. Authentication is not required to exploit this vulnerability. Successful exploitation allows an attacker to gain complete control of the system on which the product is...

WordPress MiwoFTP Plugin 1.0.5 CSRF Arbitrary File Creation Exploit (RCE)

Exploit for php platform in category web applications WordPress MiwoFTP Plugin 1.0.5 CSRF Arbitrary File Creation Exploit RCE Vendor: Miwisoft LLC Product web page: http://www.miwisoft.com Affected version: 1.0.5 Summary: MiwoFTP is a smart, fast and lightweight file manager plugin that operates...

WordPress Plugin MiwoFTP 1.0.5 - Cross-Site Request Forgery Arbitrary File Creation Remote Code Execution

WordPress Plugin MiwoFTP 1.0.5 - Cross-Site Request Forgery Arbitrary File Creation Remote Code Execution WordPress MiwoFTP Plugin 1.0.5 CSRF Arbitrary File Creation Exploit RCE Vendor: Miwisoft LLC Product web page: http://www.miwisoft.com Affected version: 1.0.5 Summary: MiwoFTP is a smart,...