CVE-2024-7329 YouDianCMS image_upload.php unrestricted upload

A vulnerability, which was classified as critical, was found in YouDianCMS 7. Affected is an unknown function of the file /Public/ckeditor/plugins/multiimage/dialogs/imageupload.php. The manipulation of the argument files leads to unrestricted upload. It is possible to launch the attack remotely...

CVE-2024-7329: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, was found in YouDianCMS 7. Affected is an unknown function of the file /Public/ckeditor/plugins/multiimage/dialogs/imageupload.php. The manipulation of the argument files leads to unrestricted upload. It is possible to launch the attack remotely...

CVE-2008-6814: Improper Input Validation

Unrestricted file upload vulnerability in imageupload.php in the SimpleBoard comsimpleboard component 1.0.1 and earlier for Mambo allows remote attackers to execute arbitrary code by uploading a file with an executable extension and an image/jpeg content type, then accessing this file via a direc...

CVE-2008-5732: Improper Input Validation

Unrestricted file upload vulnerability in lib/imageupload.php in KafooeyBlog 1.55b allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file...

BLOG 1.55B - 'image_upload.php' Arbitrary File Upload

Piker BLOG v1.55B Arbitrary File Upload Vulnerability Affected software: BLOG v1.55B prior versions can be affected Vendor: http://sourceforge.net/projects/kafooeyblog/ Risk: High http://target/path/lib/imageupload.php This script only checks if the file you are uploading is not a text/plain file...

CVE-2006-5043: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in the Joomlaboard Forum Component comjoomlaboard before 1.1.2 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the sbp parameter to 1 fileupload.php or 2 imageupload.php, a variant of CVE-2006-3528...

CVE-2006-3528

Multiple PHP remote file inclusion vulnerabilities in Simpleboard Mambo module 1.1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the sbp parameter to 1 imageupload.php and 2 fileupload.php...

CVE-2006-3528: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Simpleboard Mambo module 1.1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the sbp parameter to 1 imageupload.php and 2 fileupload.php...