CVE-2013-10040: Unrestricted Upload of File with Dangerous Type

ClipBucket version 2.6 and earlier contains a critical vulnerability in the ofcuploadimage.php script located at /adminarea/charts/ofc-library/. This endpoint allows unauthenticated users to upload arbitrary files, including executable PHP scripts. Once uploaded, the attacker can access the file...

WordPress plugin wp-business-intelligence remote code execution vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A remote code execution vulnerability exists in the WordPress plugin wp-business-intelligence. Failure to...

spamtask - ofc_upload_image.php Arbitrary File Upload

The spamtask WordPress plugin was affected by an ofcuploadimage.php Arbitrary File Upload security vulnerability...

seo-spy-google - ofc_upload_image.php Arbitrary File Upload

The seo-spy-google-wordpress-plugin WordPress plugin was affected by an ofcuploadimage.php Arbitrary File Upload security vulnerability...

WordPress Business Intelligence Lite Plugin <= 1.0.6 - Remote Code Execution

This plugin is prone to a remote code execution exploit because of ofcuploadimage.php file parameters. Solution Update the plugin...

OpenEMR PHP File Upload Vulnerability

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...