CVE-2005-1376

Multiple directory traversal vulnerabilities in 1 document.php or 2 insertMyDoc.php in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote project administrators to upload arbitrary files...

CVE-2005-0409

CitrusDB 0.3.6 and earlier does not verify authorization for the 1 importcc.php and 2 uploadcc.php, which allows remote attackers to upload credit card data and obtain sensitive information such as the pathnames for temporary files that store credit card data, and facilitates the exploitation of...

CVE-2005-0272: Undefined Security Weakness

ReviewPost PHP Pro before 2.84 allows remote attackers to upload and execute arbitrary PHP files by posting a review file with multiple extensions, which bypasses the intended restrictions...

MediaWiki 1.3.x - Arbitrary Script Upload

MediaWiki 1.3.x - Arbitrary Script Upload source: https://www.securityfocus.com/bid/11985/info MediaWiki is reported prone to a vulnerability that can allow a remote attacker to upload arbitrary PHP scripts to a vulnerable server. This issue results from insufficient sanitization of user-supplied...

CVE-2002-2312

Opera 6.0.1 allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaScript 1 event.ctrlKey or 2 event.shiftKey onkeydown event contained in a webpage...

CVE-2000-0629

The CVE-2000-0629 issue affects Sun Java Web Server 2.0 and earlier, where the default installation includes the bboard servlet (/servlet/sunexamples.BBoardServlet) that has a well-known vulnerability allowing an attacker to execute arbitrary commands with the web server’s privileges. This is tri...