9 matches found
CVE-2023-26775
File Upload vulnerability found in Monitorr v.1.7.6 allows a remote attacker t oexecute arbitrary code via a crafted file upload to the assets/php/upload.php endpoint...
CVE-2023-26775: Unrestricted Upload of File with Dangerous Type
File Upload vulnerability found in Monitorr v.1.7.6 allows a remote attacker t oexecute arbitrary code via a crafted file upload to the assets/php/upload.php endpoint...
CVE-2019-11615: Unrestricted Upload of File with Dangerous Type
/fileman/php/upload.php in doorGets 7.0 has an arbitrary file upload vulnerability. A remote normal registered user can use this vulnerability to upload backdoor files to control the server...
PT-2019-12422
Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote normal registered user to upload arbitrary files, potentially including backdoor files, to control the server. This is due to a vulnerability in the /fileman/php/upload.php endpoint...
CVE-2012-3576
The CVE-2012-3576 issue affects the WordPress wpStoreCart plugin (notably versions 2.5.27–2.5.29). It is an Arbitrary File Upload vulnerability in upload.php that allows an attacker to upload a file with an executable extension and then access it via uploads/wpstorecart to execute code on the ser...
CVE-2012-3576
Unrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/wpstorecart...
CVE-2012-3576: Undefined Security Weakness
Unrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/wpstorecart...
PT-2012-4822
Name of the Vulnerable Software and Affected Versions wpStoreCart plugin versions prior to 2.5.30 Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the php/upload.php endpoint, and then accessing it via a direct request to...
ewebeditor(PHP) Ver 3.8 present an arbitrary file upload 0day-vulnerability warning-the black bar safety net
titleeWebeditoR3. 8 for php any file on the EXP/title form action=”" method=post enctype=”multipart/form-data” INPUT TYPE="hidden" name="MAXFILESIZE" value="5 1 2 0 0 0" URL:input type=text name=url value=”http://www.sitedirsec.com/ewebeditor/” size=1 0 0br INPUT TYPE=”hidden” name=”aStyle1 2”...