Lucene search
+L

225 matches found

Prion
Prion
•added 2012/01/04 7:55 p.m.•14 views

Unrestricted file upload

Multiple unrestricted file upload vulnerabilities in the WP Symposium plugin before 11.12.24 for WordPress allow remote attackers to execute arbitrary code by uploading a file with an executable extension using 1 uploadify/uploadadminavatar.php or 2 uploadify/uploadprofileavatar.php, then accessi...

7.5CVSS8.5AI score0.04195EPSS
SaveExploits0References6Affected Software1
Prion
Prion
•added 2011/12/25 1:55 a.m.•22 views

Unrestricted file upload

Unrestricted file upload vulnerability in QuiXplorer 2.3 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension using the upload action to index.php, then accessing it via a direct request to the file in an unspecified directory...

7.5CVSS8.3AI score0.03774EPSS
SaveExploits1References2Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/12/25 12:00 a.m.•2 views

CVE-2011-5005: Undefined Security Weakness

Unrestricted file upload vulnerability in QuiXplorer 2.3 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension using the upload action to index.php, then accessing it via a direct request to the file in an unspecified directory...

7.5CVSS6.5AI score0.03774EPSS
SaveExploits1References1
Prion
Prion
•added 2011/01/25 1:00 a.m.•21 views

Unrestricted file upload

Unrestricted file upload vulnerability in modules/gallery/models/item.php in Menalto Gallery before 3.0 and beta allows remote authenticated users with upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file...

6CVSS7.9AI score0.01676EPSS
SaveExploits0References5Affected Software1
UbuntuCve
UbuntuCve
•added 2011/01/25 1:00 a.m.•45 views

CVE-2010-4353

Unrestricted file upload vulnerability in modules/gallery/models/item.php in Menalto Gallery before 3.0 and beta allows remote authenticated users with upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file...

6CVSS6.2AI score0.01676EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2011/01/25 12:00 a.m.•37 views

CVE-2010-4353

Unrestricted file upload vulnerability in modules/gallery/models/item.php in Menalto Gallery before 3.0 and beta allows remote authenticated users with upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file...

7.4AI score0.01676EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/01/25 12:00 a.m.•2 views

CVE-2010-4353: Undefined Security Weakness

Unrestricted file upload vulnerability in modules/gallery/models/item.php in Menalto Gallery before 3.0 and beta allows remote authenticated users with upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file...

6CVSS6.5AI score0.01676EPSS
SaveExploits0References1
NVD
NVD
•added 2010/06/03 4:30 p.m.•21 views

CVE-2010-2153

Unrestricted file upload vulnerability in admin/code/tcefunctionstcecodeeditor.php in TCExam 10.1.006 and 10.1.007 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in cache/...

6.8CVSS7.7AI score0.07472EPSS
SaveExploits2References6
Prion
Prion
•added 2010/04/27 3:30 p.m.•18 views

Unrestricted file upload

Unrestricted file upload vulnerability in Element-IT Ultimate Uploader 1.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in upload/...

6.8CVSS8.2AI score0.03372EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
•added 2010/04/09 5:00 p.m.•36 views

CVE-2010-0993

Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified...

7.3AI score0.0156EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2010/04/09 5:00 p.m.•41 views

CVE-2010-1334

Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.4 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in an unspecified directory, a different...

7.2AI score0.01347EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/04/09 12:00 a.m.•3 views

CVE-2010-1334: Undefined Security Weakness

Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.4 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in an unspecified directory, a different...

6CVSS6.5AI score0.01347EPSS
SaveExploits0References1
NVD
NVD
•added 2010/01/21 8:30 p.m.•25 views

CVE-2010-0366

Multiple unrestricted file upload vulnerabilities in 1 register.php and 2 addvideo.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allow remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in a...

6.8CVSS7.8AI score0.03536EPSS
SaveExploits3References4
Cvelist
Cvelist
•added 2010/01/21 8:00 p.m.•35 views

CVE-2010-0366

Multiple unrestricted file upload vulnerabilities in 1 register.php and 2 addvideo.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allow remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in a...

7.8AI score0.03536EPSS
SaveExploits3References4
Check Point Advisories
Check Point Advisories
•added 2009/12/31 12:00 a.m.•34 views

Firefox Image File Dragging Malformed Extension (CVE-2005-0230)

The Mozilla web browser and its derivatives, Firefox, Netscape, and K-Meleon are applications designed for tasks related to browsing the web, such as displaying HTML encoded pages and downloading files. The Mozilla web browser allows the user to quickly save images displayed on web pages by...

5.1CVSS6.1AI score0.03256EPSS
SaveExploits1
UbuntuCve
UbuntuCve
•added 2009/12/24 4:30 p.m.•37 views

CVE-2009-4412

Unrestricted file upload vulnerability in Serendipity before 1.5 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in an unspecified directory. NOTE: some of...

6CVSS6.2AI score0.01852EPSS
SaveExploits0References1
NVD
NVD
•added 2009/12/24 4:30 p.m.•37 views

CVE-2009-4412

Unrestricted file upload vulnerability in Serendipity before 1.5 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in an unspecified directory. NOTE: some of...

6CVSS7.3AI score0.01852EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2009/12/22 10:00 p.m.•44 views

CVE-2009-4140

Unrestricted file upload vulnerability in ofcuploadimage.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer, as used in Piwik 0.2.35 through 0.4.3, Woopra Analytics Plugin before 1.4.3.2, and possibly other products, when registerglobals is enabled, allows remote authenticated users to...

7.2AI score0.75838EPSS
SaveExploits15References16
Cvelist
Cvelist
•added 2009/12/21 4:00 p.m.•37 views

CVE-2009-4373

Unrestricted file upload vulnerability in repository/repositoryattachment.php in AlienVault Open Source Security Information Management OSSIM 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then...

7.7AI score0.02984EPSS
SaveExploits1References3
Check Point Advisories
Check Point Advisories
•added 2009/11/19 12:00 a.m.•20 views

Internet Explorer execCommand File Type Spoofing (CVE-2004-1331)

Internet Explorer is a popular web-browser released by the Microsoft Corporation. It supports various content available on the web including HTML documents, images, dynamic scripting, and so on. Internet Explorer also provides the Dynamic Hypertext Markup Language DHTML application programming...

2.6CVSS6.4AI score0.19468EPSS
SaveExploits1
Rows per page
Query Builder