2438 matches found
GHSA-MXR5-P36V-479M Unrestricted Upload of File with Dangerous Type in jquery-file-upload
Arbitrary file upload in jQuery Upload File = 4.0.2...
Responsive FileManager 9.13.4 XSS / File Manipulation / Traversal
Responsive FileManager 9.13.4 - Multiple Vulnerabilities Date: December 12, 2018 Author: farisv Vendor Homepage: https://www.responsivefilemanager.com/ Vulnerable Package Link: https://github.com/trippo/ResponsiveFilemanager/releases/download/v9.13.4/responsivefilemanager.zip Responsive FileManag...
Security Bulletin: jQuery UI title/default content cross-site scripting (CVE-2012-6662 and CVE-2010-5312)
Question Security Bulletin: jQuery UI title/default content cross-site scripting CVE-2012-6662 and CVE-2010-5312 Answer Abstract: The jQuery UI is vulnerable to cross-site scripting which is caused by improper validation of user-supplied input as well as input by the default content. A remote...
Node.js third-party modules: Prototype pollution attack through jQuery $.extend
I would like to report prototype pollution in jQuery. It allows an attacker to inject properties on Object.prototype. Module module name: jquery version: 3.3.1 npm page: https://www.npmjs.com/package/jquery Module Description jQuery is a fast, small, and feature-rich JavaScript library. Module...
Arbitrary File Upload
jquery-file-upload is vulnerable to arbitrary file upload attacks. The vulnerability exists in upload.php where an unauthenticated user can upload arbitrary files to the /uploads/ directory...
CVE-2018-9207
Arbitrary file upload in jQuery Upload File = 4.0.2...
CVE-2018-9207
Arbitrary file upload in jQuery Upload File = 4.0.2...
Default credentials
Arbitrary file upload in jQuery Upload File = 4.0.2...
CVE-2018-9207
Arbitrary file upload in jQuery Upload File = 4.0.2...
CVE-2018-9207
Arbitrary file upload in jQuery Upload File = 4.0.2...
CVE-2018-9207
CVE-2018-9207 refers to an arbitrary file upload vulnerability in jquery-file-upload (
jQuery Upload File 4.0.2 File Upload
File upload vulnerability in jQuery Upload File php/upload.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
jQuery File Upload < 9.24.1 Arbitrary File Upload
According to its self-reported version number, jQuery File Upload is prior to 9.24.1. Therefore, it may be affected by an arbitrary file upload vulnerability on a web server that executes files with .php as part of the file extension. An unauthenticated attacker could leverage this vulnerability ...
jQuery File Upload < 9.22.1 Arbitrary File Upload
According to its self-reported version number, jQuery File Upload is prior to 9.22.1. Therefore, it may be affected by an arbitrary file upload vulnerability. An unauthenticated attacker could leverage this vulnerability to gain access to the host in the context of the web application user. Note...
jQuery File Upload < 9.25.1 Potential Vulnerability With ImageMagick
According to its self-reported version number, jQuery File Upload is prior to 9.25.1. Therefore, it may be used to exploit remote code execution in an unpatched ImageMagick version. An unauthenticated attacker could leverage this vulnerability to gain access to the host in the context of the web...
blueimp's jQuery 9.22.0 - (Arbitrary) File Upload (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "blueimp's jQuery Arbitrary File Upload", 'Description' = %q This module exploits an arbitrary file upload in the sample PHP upload handler for...
CVE-2018-9208
The CVE-2018-9208 entry corresponds to an Unaithenticated arbitrary file upload vulnerability in the jQuery Picture Cut component (<= v1.1Beta). Connected sources consistently describe that an unauthenticated user can upload arbitrary files via the vulnerable upload path (e.g., upload.php), en...
CVE-2018-9208
Unauthenticated arbitrary file upload vulnerability in jQuery Picture Cut = v1.1Beta...