CVE-2019-19576

class.upload.php = 2.0.3 任意文件上传 作者 - Jinny Ramsmark 受影响供应商 - Verot.net 受影响产品 - class.upload.php = 2.0.3 测试环境：新安装的 Ubuntu 19.10，PHP7.3 和 Apache/2.4.38 特别发现 Debian/Ubuntu 存在漏洞，因为它们将 php、phar 和 phtml 扩展添加到了可用的 PHP 处理程序中。在此情况下，class.upload.php 未将 phar 扩展加入黑名单。 描述 这是一个过滤器绕过漏洞，导致任意文件上传和远程代码执行。...

CVE-2019-19634

CVE-2019-19634 - class.upload.php = 2.0.4 任意文件上传 作者 - Jinny Ramsmark 受影响供应商 - Verot.net 受影响产品 - class.upload.php = 2.0.4 测试环境：全新安装的 Ubuntu 14.04，PHP5 和 Apache 特别发现 Debian/Ubuntu 存在漏洞，因为它们将 pht 扩展名以及其他扩展名添加到了可用的 PHP 处理器中。在这种情况下，class.upload.php 没有将 pht 扩展名加入黑名单。 此 CVE 与 CVE-2019-19576 直接相关 描述...

CVE-2019-19634

class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used in the K2 extension for Joomla! and other products, omits .pht from the set of dangerous file extensions, a similar issue to CVE-2019-19576...

CVE-2019-19576

class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions...

CVE-2023-6551 Stored XSS in class.upload.php

As a simple library, class.upload.php does not perform an in-depth check on uploaded files, allowing a stored XSS vulnerability when the default configuration is used. Developers must be aware of that fact and use extension whitelisting accompanied by forcing the server to always provide...

CVE-2023-6551 Stored XSS in class.upload.php

As a simple library, class.upload.php does not perform an in-depth check on uploaded files, allowing a stored XSS vulnerability when the default configuration is used. Developers must be aware of that fact and use extension whitelisting accompanied by forcing the server to always provide...

CVE-2023-6551: Unrestricted Upload of File with Dangerous Type

As a simple library, class.upload.php does not perform an in-depth check on uploaded files, allowing a stored XSS vulnerability when the default configuration is used. Developers must be aware of that fact and use extension whitelisting accompanied by forcing the server to always provide...

GHSA-2GC7-W4HW-RR2M class.upload.php in verot.net omits .pht from the set of dangerous file extensions

class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used in the K2 extension for Joomla! and other products, omits .pht from the set of dangerous file extensions, a similar issue to CVE-2019-19576...

class.upload.php in verot.net omits .pht from the set of dangerous file extensions

class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used in the K2 extension for Joomla! and other products, omits .pht from the set of dangerous file extensions, a similar issue to CVE-2019-19576...

Remote code execution in verot/class.upload.php

class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions...

GHSA-R5GM-4P5W-PQ2P Remote code execution in verot/class.upload.php

class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions...

CVE-2019-19634

class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used in the K2 extension for Joomla! and other products, omits .pht from the set of dangerous file extensions, a similar issue to CVE-2019-19576...

CVE-2019-19634

class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used in the K2 extension for Joomla! and other products, omits .pht from the set of dangerous file extensions, a similar issue to CVE-2019-19576...

CVE-2019-19634: Unrestricted Upload of File with Dangerous Type

class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used in the K2 extension for Joomla! and other products, omits .pht from the set of dangerous file extensions, a similar issue to CVE-2019-19576...

CVE-2019-19576

class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions...

Code injection

class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions...

CVE-2019-19576

class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions...

PT-2019-15875

Name of the Vulnerable Software and Affected Versions class.upload.php versions prior to 1.0.3 class.upload.php versions 2.x prior to 2.0.4 Description The issue is related to the omission of .phar from the set of dangerous file extensions in class.upload.php, which can be exploited for remote co...

class.upload.php 0.30 - Remote File Upload Vulnerability

No description provided by source. Exploit Title: class.upload.php v 0.30 Remote File Upload Vulnerability Author: DIES3L Email: [email protected] Date: 26-1-2011 Software Link: http://www.verot.net GooGle Dork : No Dork For Kids : Version: 0.30 Tested on: LiNuX ====================== -- Exploit --...

class.upload.php 0.30 - Arbitrary File Upload

class.upload.php 0.30 - Arbitrary File Upload Exploit Title: class.upload.php v 0.30 Remote File Upload Vulnerability Author: DIES3L Email: [email protected] Date: 26-1-2011 Software Link: http://www.verot.net GooGle Dork : No Dork For Kids : Version: 0.30 Tested on: LiNuX ====================== --...