CVE-2019-19576

class.upload.php = 2.0.3 任意文件上传 作者 - Jinny Ramsmark 受影响供应商 - Verot.net 受影响产品 - class.upload.php = 2.0.3 测试环境：新安装的 Ubuntu 19.10，PHP7.3 和 Apache/2.4.38 特别发现 Debian/Ubuntu 存在漏洞，因为它们将 php、phar 和 phtml 扩展添加到了可用的 PHP 处理程序中。在此情况下，class.upload.php 未将 phar 扩展加入黑名单。 描述 这是一个过滤器绕过漏洞，导致任意文件上传和远程代码执行。...

CVE-2019-19634

CVE-2019-19634 - class.upload.php = 2.0.4 任意ファイルアップロード 作者 - Jinny Ramsmark 影響を受けるベンダー - Verot.net 影響を受ける製品 - class.upload.php = 2.0.4 新規インストールしたUbuntu 14.04（PHP5およびApache使用）でテスト済み 特にDebian/Ubuntuは、利用可能なPHPハンドラーにpht拡張子などを追加するため、脆弱性があることが判明しています。この場合、class.upload.phpはpht拡張子をブラックリストに登録していません。...

CVE-2019-19634

class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used in the K2 extension for Joomla! and other products, omits .pht from the set of dangerous file extensions, a similar issue to CVE-2019-19576...

CVE-2019-19576

class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions...

CVE-2023-6551 Stored XSS in class.upload.php

As a simple library, class.upload.php does not perform an in-depth check on uploaded files, allowing a stored XSS vulnerability when the default configuration is used. Developers must be aware of that fact and use extension whitelisting accompanied by forcing the server to always provide...

CVE-2023-6551 Stored XSS in class.upload.php

As a simple library, class.upload.php does not perform an in-depth check on uploaded files, allowing a stored XSS vulnerability when the default configuration is used. Developers must be aware of that fact and use extension whitelisting accompanied by forcing the server to always provide...

GHSA-2GC7-W4HW-RR2M class.upload.php in verot.net omits .pht from the set of dangerous file extensions

class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used in the K2 extension for Joomla! and other products, omits .pht from the set of dangerous file extensions, a similar issue to CVE-2019-19576...

class.upload.php in verot.net omits .pht from the set of dangerous file extensions

class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used in the K2 extension for Joomla! and other products, omits .pht from the set of dangerous file extensions, a similar issue to CVE-2019-19576...

Remote code execution in verot/class.upload.php

class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions...

GHSA-R5GM-4P5W-PQ2P Remote code execution in verot/class.upload.php

class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions...

CVE-2019-19634

class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used in the K2 extension for Joomla! and other products, omits .pht from the set of dangerous file extensions, a similar issue to CVE-2019-19576...

CVE-2019-19634

class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used in the K2 extension for Joomla! and other products, omits .pht from the set of dangerous file extensions, a similar issue to CVE-2019-19576...

CVE-2019-19576

class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions...

Code injection

class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions...

CVE-2019-19576

class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions...

PT-2019-15875

Name of the Vulnerable Software and Affected Versions class.upload.php versions prior to 1.0.3 class.upload.php versions 2.x prior to 2.0.4 Description The issue is related to the omission of .phar from the set of dangerous file extensions in class.upload.php, which can be exploited for remote co...

class.upload.php 0.30 - Remote File Upload Vulnerability

No description provided by source. Exploit Title: class.upload.php v 0.30 Remote File Upload Vulnerability Author: DIES3L Email: [email protected] Date: 26-1-2011 Software Link: http://www.verot.net GooGle Dork : No Dork For Kids : Version: 0.30 Tested on: LiNuX ====================== -- Exploit --...

class.upload.php 0.30 - Arbitrary File Upload

class.upload.php 0.30 - Arbitrary File Upload Exploit Title: class.upload.php v 0.30 Remote File Upload Vulnerability Author: DIES3L Email: [email protected] Date: 26-1-2011 Software Link: http://www.verot.net GooGle Dork : No Dork For Kids : Version: 0.30 Tested on: LiNuX ====================== --...