212 matches found
PHP upload - unijimpe Arbitrary File Upload
PHP upload - unijimpe Arbitrary File Upload || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ team wlhaan hacker | | // | | |...
PHP upload - (unijimpe) Remote File Upload Vulnerability
Exploit for unknown platform in category web applications ======================================================== PHP upload - unijimpe Remote File Upload Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...
CVE-2008-1866: Improper Control of Generation of Code
admin/modifconfig.php in Blog Pixel Motion aka PixelMotion does not require admin authentication, which allows remote authenticated users to upload arbitrary PHP scripts in a ZIP archive, which is written to templateZip/ and then automatically extracted under templates/ for execution via a direct...
sNews 1.5.30 - Remote Reset Admin Pass Command Execution
sNews 1.5.30 - Remote Reset Admin Pass Command Execution 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".deche...
PHP Upload Center远程文件包含漏洞
No description provided by source...
CVE-2006-6360
The CVE-2006-6360 vulnerability affects PHP Upload Center 2.0: activate.php accepts a footerpage parameter that can be controlled by an attacker to include a remote PHP file, enabling arbitrary code execution. It is a networked issue with low access complexity and no authentication, leading to po...
CVE-2006-6360
PHP remote file inclusion vulnerability in activate.php in PHP Upload Center 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the footerpage parameter...
CVE-2006-6360: Undefined Security Weakness
PHP remote file inclusion vulnerability in activate.php in PHP Upload Center 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the footerpage parameter...
PHP Upload Center 2.0 (activate.php) File Include Vulnerabilities
Exploit for unknown platform in category web applications ================================================================= PHP Upload Center 2.0 activate.php File Include Vulnerabilities ================================================================= Coding 4 Fun Name = PHP Upload Center v2.0 ...
PHP Upload Center 2.0 - activate.php File Inclusion
PHP Upload Center 2.0 - activate.php File Inclusion Coding 4 Fun Name = PHP Upload Center v2.0 ; Class = Remote/Local File Inclusion ; Download = http://skrypty.webpc.pl/pobierz.php?id=58 ; Found by = GregStar gregstaratc4fdotpl http://c4f.pl ;...
PHP Upload Tool 1.0 - Arbitrary File Upload / Directory Traversal
source: https://www.securityfocus.com/bid/21150/info PHP Upload Tool is prone to an arbitrary file-upload vulnerability and a directory-traversal vulnerability. These issues occur because the application fails to sanitize user-supplied data. An attacker could exploit these issues to execute code ...
HTTP Upload Tool (download.php) Information Disclosure Vulnerability
Exploit for unknown platform in category web applications ==================================================================== HTTP Upload Tool download.php Information Disclosure Vulnerability ==================================================================== Target: HTTP Upload Tool For PHP 1...
speedwiki20.txt
product :Speedwiki 2.0 vendor site: http://speedywiki.sourceforge.net/ risk:critical a user logged in , can upload a PHP script on the server , by the upload script , there's actually no upload filter on this cms path : /speedywiki/index.php?upload=1 xss get :...
CVE-2006-1208
Sergey Korostel PHP Upload Center allows remote attackers to execute arbitrary PHP code by uploading a file whose name ends in a .php.li extension, which can be accessed from the upload directory...
CVE-2006-1207
PHP Upload Center stores password hashes under the web root with insufficient access control, which allows remote attackers to download each password hash via a direct request for the upload/users/USERNAME file...
CVE-2006-1207
PHP Upload Center stores password hashes under the web root with insufficient access control, which allows remote attackers to download each password hash via a direct request for the upload/users/USERNAME file...
CVE-2006-1207: Undefined Security Weakness
PHP Upload Center stores password hashes under the web root with insufficient access control, which allows remote attackers to download each password hash via a direct request for the upload/users/USERNAME file...
CVE-2006-1208: Undefined Security Weakness
Sergey Korostel PHP Upload Center allows remote attackers to execute arbitrary PHP code by uploading a file whose name ends in a .php.li extension, which can be accessed from the upload directory...
PT-2006-2223 · Php · Php Upload Center
Name of the Vulnerable Software and Affected Versions: PHP Upload Center affected versions not specified Description: The issue allows remote attackers to download password hashes due to insufficient access control. Specifically, password hashes are stored under the web root, making them accessib...