CVE-2007-1032

Unspecified vulnerability in phpMyFAQ 1.6.9 and earlier, when registerglobals is enabled, allows remote attackers to "gain the privilege for uploading files on the server."...

logahead UNU edition 1.0 Remote Upload File / Code Execution Vuln

No description provided by source. -=--------------------ADVISORY-------------------=- logahead UNU edition 1.0 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: logahead UNU edition -=+ Version: 1.0 -=+ Vendor's URL: http://typo.i24.cc/logahea...

logahead UNU edition 1.0 Remote Upload File / Code Execution Vuln

Exploit for unknown platform in category web applications...

toendaCMS <= 1.0.0 (FCKeditor) Remote File Upload Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "ToendaCMS = 1.0.0 Shizouka stable 'FuCKeditor' remote commands execution\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork: "toendaCMS is Free Software released under th...

CVE-2006-2330

PHP-Fusion 6.00.306 and earlier, running under Apache HTTP Server 1.3.27 and PHP 4.3.3, allows remote authenticated users to upload files of arbitrary types using a filename that contains two or more extensions that ends in an assumed-valid extension such as .gif, which bypasses the validation, a...

Authentication flaw

Sire 2.0 nws allows remote attackers to upload arbitrary image files without authentication via a direct request to upload.php...

FCKEditor 2.0 <= 2.2 (connector.php) Remote Shell Upload Exploit

No description provided by source. ?php ---fckeditor22xpl.php 15.38 04/12/2005 FCKEditor 2.0 = 2.2 shell upload coded by rgod site: http://retrogod.altervista.org usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "Security against defeat implies defensive tactics; ability to...

CVE-2006-0332

Pantomime in Ecartis 1.0.0 snapshot 20050909 stores e-mail attachments in a publicly accessible directory, which may allow remote attackers to upload arbitrary files...

CVE-2005-1376

Multiple directory traversal vulnerabilities in 1 document.php or 2 insertMyDoc.php in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote project administrators to upload arbitrary files...

CVE-2005-1376

Multiple directory traversal vulnerabilities in 1 document.php or 2 insertMyDoc.php in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote project administrators to upload arbitrary files...

CVE-2005-0409

CitrusDB 0.3.6 and earlier does not verify authorization for the 1 importcc.php and 2 uploadcc.php, which allows remote attackers to upload credit card data and obtain sensitive information such as the pathnames for temporary files that store credit card data, and facilitates the exploitation of...

MediaWiki 1.3.x - Arbitrary Script Upload

MediaWiki 1.3.x - Arbitrary Script Upload source: https://www.securityfocus.com/bid/11985/info MediaWiki is reported prone to a vulnerability that can allow a remote attacker to upload arbitrary PHP scripts to a vulnerable server. This issue results from insufficient sanitization of user-supplied...

CVE-2002-2312

Opera 6.0.1 allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaScript 1 event.ctrlKey or 2 event.shiftKey onkeydown event contained in a webpage...

CVE-2000-0629

The CVE-2000-0629 issue affects Sun Java Web Server 2.0 and earlier, where the default installation includes the bboard servlet (/servlet/sunexamples.BBoardServlet) that has a well-known vulnerability allowing an attacker to execute arbitrary commands with the web server’s privileges. This is tri...