CVE-2016-1593

Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated administrators to upload and execute arbitrary JSP files via a .. dot dot in a filename within a multipart/form-data POST request to a LiveTime.woa URL...

Directory traversal

Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated administrators to upload and execute arbitrary JSP files via a .. dot dot in a filename within a multipart/form-data POST request to a LiveTime.woa URL...

CVE-2016-1593

Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated administrators to upload and execute arbitrary JSP files via a .. dot dot in a filename within a multipart/form-data POST request to a LiveTime.woa URL...

CVE-2016-3438

Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12.0.6, 12.1, and 12.2 allows remote attackers to affect confidentiality and integrity via vectors related to JRAD Heartbeat. NOTE: the previous information is from the April 2016 CPU. Oracle has...

MeshCMS 3.6 Remote Command Execution

Exploit Title: MeshCMS 3.6 – Command Execution Vulnerability Date: 2016-04-03 Exploit Author: piaox xiong Vendor Homepage: http://www.cromoteca.com/en/meshcms/ Software Link: http://www.cromoteca.com/en/meshcms/download/ Version: 3.6 Tested on: Windows OS Application Description: MeshCMS is an...

Debian Security Advisory DSA 3530-1 (tomcat6 - security update)

Multiple security vulnerabilities have been fixed in the Tomcat servlet and JSP engine, which may result on bypass of security manager restrictions, information disclosure, denial of service or session fixation. OpenVAS Vulnerability Test $Id: deb3530.nasl 6608 2017-07-07 12:05:05Z cfischer $...

VulnCheck KEV: CVE-2012-3347

AutoFORM PDM Archive before 7.0 implements user accounts in a way that allows for JMX Console authentication, which allows remote authenticated users to bypass intended access restrictions via the /jmx-console URI, and then upload and execute arbitrary JSP code via a JBoss remote-deployment...

Debian: Security Advisory (DSA-3530-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

万户OA系统jsFileUpload.jsp文件上传漏洞

万户OA系统jsFileUpload.jsp存在文件上传漏洞 上传url： /defaultroot/workflow/jsFileUpload.jsp 该处只允许上传JSP文件，其它的文件不可以 文件位置： /defaultroot/devform/workflow/原上传文件名...

CVE-2016-1524

Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute arbitrary Java code by using 1 fileUpload.do or 2 lib-1.0/external/flash/fileUpload.do to upload a JSP file, and then accessing it via a direct request for ...

CVE-2016-1524

Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute arbitrary Java code by using 1 fileUpload.do or 2 lib-1.0/external/flash/fileUpload.do to upload a JSP file, and then accessing it via a direct request for ...

subsonic.org XSS vulnerability

Vulnerable URL: http://www.subsonic.org/pages/download2.jsp?target=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 201266 Google Pagerank| 5 VIP website status:| No Check...

Oracle ATS Arbitrary File Upload

This module exploits an authentication bypass and arbitrary file upload in Oracle Application Testing Suite OATS, version 12.4.0.2.0 and unknown earlier versions, to upload and execute a JSP shell. Module Options msf use exploit/multi/http/oracle/atsfileupload msf undefinedatsfileupload show...

泛微 OA sysinterface/codeEdit.jsp 页面任意文件上传

0x01 漏洞概述 相关厂商： 泛微OA 官方主页： http://www.weaver.com.cn/ 公开时间： 2015-11-25 漏洞类型： 非授权访问/权限绕过 无需登录上传文件。 http://localhost:8088/sysinterface/codeEdit.jsp?filename=5308.java&filetype=java filename为文件名称 为空时会自动创建。 0x02 漏洞利用 代码详情 String fileid = "Ewv"; String readonly = ""; boolean isCreate = false;...

Blade - A Webshell Connection Tool With Customized WAF Bypass Payloads

Blade is a webshell connection tool based on console, currently under development and aims to be a choice of replacement of Chooper 中国菜刀. Chooper is a very cool webshell client with widly typies of server side scripts supported, but Chooper can only work on Windows opreation system, so this is th...

金蝶某系统存在任意文件上传漏洞可威胁内网

简要描述： 上传绕过，可内网才是关键 详细说明： WooYun: 某大型在线考试系统通用型任意文件上传（涉及银行、证卷等企业） 问题发生后，是有进行相应的修补，但修补的有问题，限制了对jsp马的上传，但jspx毫无限制 上传jsp直接报错 但是jspx就 http://exam.kingdee.com/mana/edit/attachupload.jsp 可直接上传jspx马 上传成功后直接查看源代码获取shell地址 漏洞证明：...

FCKeditor JSP版本 connector模块文件上传漏洞

No description provided by source...

jspwebshell Backdoor Detection

At least one instance of jspwebshell is hosted on the remote web server. This is a JSP script that acts as a backdoor and provides a convenient set of tools for attacking the affected host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

app.1and7.com XSS vulnerability

Vulnerable URL: http://app.1and7.com/enterprise/jsp/templet/browse/TempletBrowse.jsp?domain=1and7.com=10096==ou%3d10096,ou%3d10002,ou%3dData,ou%3d1and7.com,o%3deast=0=0=ou%3d10002,ou%3dData,ou%3d1and7.com,o%3deast=7=app.1and7.com=cAnonymous=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details:...

kmcollege.ac.in XSS vulnerability

Vulnerable URL: http://www.kmcollege.ac.in/viewgallery1.jsp?topic=Question%20Bank=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E=1127181020131652311..pdf&image1;=&image2;=&image3;=&image4;=&image5;=&image6;=&image7;=&image8;=&image9;=&image10;==admin Details: Description| Value ---|--- Patched:| N...