EUVD-2011-4498

Malware in sbrugna...

CF Image Hosting Script 1.1 'upload.php' Arbitrary File Upload Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/39870/info CF Image Hosting Script is prone to an arbitrary-file-upload vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to upload arbitrary code and run ...

CVE-2011-4572

CVE-2011-4572: A cross-site scripting (XSS) vulnerability exists in inc/tesmodrewite.php of CF Image Hosting Script versions 1.3.82 and 1.4.1 (and likely earlier versions before 1.4.2). The issue allows remote attackers to inject arbitrary JavaScript/HTML via the q parameter. The entry notes this...

CF Image Hosting Script 1.1 - upload.php Arbitrary File Upload

CF Image Hosting Script 1.1 - upload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/39870/info CF Image Hosting Script is prone to an arbitrary-file-upload vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to...

CF Image Hosting Script v1.0 File Disclosure Vulnerability

Exploit for php platform in category web applications ========================================================== CF Image Hosting Script v1.0 File Disclosure Vulnerability ========================================================== |=-----------------------------------------------------=|...