Unrestricted file upload

Unrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers to upload arbitrary PHP code via a filename with a double extension such as 1 .rar.php or 2 .zip.php...

CVE-2007-0871

Unrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers to upload arbitrary PHP code via a filename with a double extension such as 1 .rar.php or 2 .zip.php...

CVE-2007-0871

Unrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers to upload arbitrary PHP code via a filename with a double extension such as 1 .rar.php or 2 .zip.php...

CVE-2007-0871

The CVE-2007-0871 entry concerns the eXtremePow eXtreme File Hosting product, where an unrestricted file upload vulnerability exists. The underlying issue is that an attacker can upload files with double extensions (for example, .rar.php or .zip.php), enabling remote execution of PHP code on the ...

eXtreme File Hosting remote file upload vulnerability

A security bug have been discovered in eXtreme File Hosting, which can be upload the attaker files and can get the shell with phpshell. bug : in this borgram with php can user upload zip or rar file hacker can upload the a.php.rar file that contain ?php $file = 'http://sample.com/evilefile.php';...

eXtreme File Hosting - Arbitrary .RAR File Upload

eXtreme File Hosting - Arbitrary .RAR File Upload source: https://www.securityfocus.com/bid/22498/info eXtreme File Hosting is prone to an arbitrary file-upload vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue could allow an attacker to upload and...

eXtreme File Hosting - Arbitrary '.RAR' File Upload

source: https://www.securityfocus.com/bid/22498/info eXtreme File Hosting is prone to an arbitrary file-upload vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue could allow an attacker to upload and execute arbitrary PHP script code in the context ...

directadmin-xss.txt

DirectAdmin Multiple Cross Site Scripting Vulnerabilities Control panel for web hosting companies running Red Hat 7.x, 8.x, 9.x, Red Hat Enterprise and FreeBSD. This issue is due to a failure in the application to properly sanitize user-supplied input. Attackers may exploit this issue via a web...

Sql injection

SQL injection vulnerability in windows.asp in Fullaspsite Asp Hosting Sitesi allows remote attackers to execute arbitrary SQL commands via the kategoriid parameter...

CVE-2007-0678

CVE-2007-0678 describes an SQL injection in the windows.asp page of Fullaspsite Asp Hosting Sitesi, exploitable via the kategori_id parameter. The vulnerability allows remote execution of arbitrary SQL commands and is reflected in NVD with a CVSS v2 base score of 7.5 (High) and NETWORK/LOW access...

Fullaspsite Asp Hosting Sitesi (tr) SQL Injection Vulnerability

No description provided by source. Fullaspsite Asp Hosting tr == SQL Injection Vulnerability Author : cl24zy - DrEgHoT - TuF4N Site : www.hacklive.org , www.illegal-attack.org Contact: [email protected] Download Link Of Fullaspsite Asp Hosting Sitesi tr : http://www.aspindir.com/Goster/4383 Demo...

Fullaspsite Asp Hosting (tr) == SQL Injection Vulnerability

Fullaspsite Asp Hosting tr == SQL Injection Vulnerability Author : cl24zy - DrEgHoT - TuF4N Site : www.hacklive.org , www.illegal-attack.org Contact: [email protected] Download Link Of Fullaspsite Asp Hosting Sitesi tr : http://www.aspindir.com/Goster/4383 Demo :...

Fullaspsite Asp Hosting Sitesi - tr SQL Injection

Fullaspsite Asp Hosting Sitesi - tr SQL Injection Fullaspsite Asp Hosting tr == SQL Injection Vulnerability Author : cl24zy - DrEgHoT - TuF4N Site : www.hacklive.org , www.illegal-attack.org Contact: [email protected] Download Link Of Fullaspsite Asp Hosting Sitesi tr :...

Fullaspsite Asp Hosting Sitesi (tr) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Fullaspsite Asp Hosting Sitesi tr SQL Injection Vulnerability =============================================================== Fullaspsite Asp Hosting tr == SQL Injection...

Fullaspsite Asp Hosting Sitesi - 'tr' SQL Injection

Fullaspsite Asp Hosting tr == SQL Injection Vulnerability Author : cl24zy - DrEgHoT - TuF4N Site : www.hacklive.org , www.illegal-attack.org Contact: [email protected] Download Link Of Fullaspsite Asp Hosting Sitesi tr : http://www.aspindir.com/Goster/4383 Demo :...

PHP 5.2 - FOpen Safe_mode Restriction Bypass

PHP 5.2 - FOpen Safemode Restriction Bypass source: https://www.securityfocus.com/bid/22261/info PHP is prone to a 'safemode' restriction-bypass vulnerability. Successful exploits could allow an attacker to write files in unauthorized locations; other attacks may also be possible. This...

PHP 5.2 - FOpen 'Safe_mode' Restriction Bypass

source: https://www.securityfocus.com/bid/22261/info PHP is prone to a 'safemode' restriction-bypass vulnerability. Successful exploits could allow an attacker to write files in unauthorized locations; other attacks may also be possible. This vulnerability would be an issue in shared-hosting...

Re: Unpatchable Quicktime XSS

New MySpace XSS by Mx http://mxcore.com for more info What you need: Adobe Acrobat Professional 7.0 works A server to host the PDF in 1. Open up Adobe Acrobat Professional. 2. File Create PDF I did From File, but you can do whatever you want. This step explains itself pretty much. 3. You now have...

CVE-2006-6814

CVE-2006-6814 describes a directory traversal vulnerability in FolderManager/FolderManager.aspx (Hosting Controller 7c). The flaw allows remote authenticated users to read and modify arbitrary files and to list arbitrary directories by sending ..\ sequences in the BrowsePath parameter. This resul...

Hosting Controller 7C - FolderManager.aspx Directory Traversal

Hosting Controller 7C - FolderManager.aspx Directory Traversal source: https://www.securityfocus.com/bid/21786/info Hosting Controller is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to modi...