PT-2018-14064

Name of the Vulnerable Software and Affected Versions Wp-Insert plugin versions through 2.4.2 Description The issue allows the upload of arbitrary PHP code due to the exposure and configuration of FCKeditor under specific endpoints, including...

CVE-2018-10795: Unrestricted Upload of File with Dangerous Type

Liferay 6.2.x and before has an FCKeditor configuration that allows an attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment via a browser/liferay/browser.html?Type= or...

CVE-2013-2105

The Show In Browser showinbrowser gem 0.0.3 for Ruby allows local users to inject arbitrary web script or HTML via a symlink attack on /tmp/browser.html...

CVE-2009-3182: Undefined Security Weakness

Unrestricted file upload vulnerability in admin/editor/filemanager/browser.html in Anantasoft Gazelle CMS 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in user/File/...