1382 matches found
CVE-2018-12468
A vulnerability in the administration console of Micro Focus GroupWise prior to version 18.0.2 may allow a remote attacker authenticated as an administrator to upload files to an arbitrary path on the server. In certain circumstances this could result in remote code execution...
Dialogic PowerMedia XMS File Unrestricted Upload Vulnerability
Dialogic PowerMedia XMS is a suite of software multimedia servers for real-time communications from Dialogic, Inc. that provide real-time multimedia communication solutions for IMS, MRF, enterprise and WebRTC applications. A security vulnerability exists in the management console of Dialogic...
UBUNTU-CVE-2018-1079
pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user malicious REST call. The REST interface of the pcsd service did not properly sanitize the file name from the /remote/putfile query. If the /etc/booth directory exists, an authenticated attacker with...
CVE-2016-8515
A remote malicious file upload vulnerability in HPE Version Control Repository Manager VCRM was found. The problem impacts all versions prior to 7.6...
CVE-2016-8515
CVE-2016-8515 is a remote vulnerability in HP Version Control Repository Manager (VCRM) prior to version 7.6.0 that allows an attacker to upload arbitrary files. The connected documents consistently describe this as a vulnerability in VCRM versions before 7.6.0. The exact root cause details are n...
CVE-2017-16594
This vulnerability allows remote attackers to create arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...
Toplist 2 SQL Injection / Backdoor Account / Shell Upload
============================================================================ | Title : toplist v 2 Backdoor account Vulnerability | | Author : indoushka | | email : [email protected] | | Tested on : windows 10 FranASSais V.Pro | | Version : v 2 | | Vendor : http://wmscripti.com | | Dork :...
CVE-2017-15549
An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition NVE 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote authenticated malicious user with low privileges could potentially upload arbitrary maliciously crafted...
WP Symposium Plugin Arbitrary File Upload
The WP Symposium Plugin for WordPress running on the remote web server is affected with an remote file upload vulnerability. A remote, unauthenticated attacker can exploit this vulnerability, via a specially crafted request, allowing an attacker to execute arbitrary code on the target web...
Western Digital MyCloud - 'multi_uploadify' File Upload (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HEAD', :uri = '/web/', :pattern = /Apache/ include Msf::Exploit::Remote::HttpClient include Msf::Exploit::FileDropper def initializeinfo=...
HPE BSM Platform Application Performance Management System Health Path Traversal Vulnerability (CNVD-2017-33007)
HPE BSM Platform Application Performance Management System Health is a suite of application performance management systems for the BSM platform from Hewlett Packard Enterprise HPE. A path traversal vulnerability exists in HPE BSM Platform Application Performance Management System Health versions...
Progress Telerik UI for ASP.NET AJAX Encryption Vulnerability
ASP.NET AJAX is a control for ASP.NET. Progress Telerik UI is a UI user interface for ASP.NET controls that handle AJAX, developed by Telerik USA. A security vulnerability in Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX versions prior to R1 2017 and R2 versions prior to R2 2017 SP2 stem...
PT-2017-3938
Name of the Vulnerable Software and Affected Versions Telerik UI for ASP.NET AJAX versions prior to R1 2017 Telerik UI for ASP.NET AJAX R2 versions prior to R2 2017 SP2 Description The issue is related to weak encryption in RadAsyncUpload, which allows remote attackers to perform arbitrary file...
WordPress Logosware Suite Uploader 1.1.6 Plugin Remote File Upload Vulnerability
Exploit for php platform in category web applications - Title : WordPress Plugin Logosware Suite Uploader 1.1.6 - Remote File Upload - Author : Shahab Shamsi - Vendor : https://wordpress.org/plugins/logosware-suite-uploader/ - Category : Webapps - Date : 30.July.2017 Vulnerable Source: 176:...
Remote File Upload
kindeditor is vulnerable to remote file upload. The library does not check whether a user has the permission to upload files to the system, allowing a malicious user to upload an arbitrary file to the system through a POST request to the php/uploadjson.php file...
File upload vulnerability in finecms latest version v5.0.8
FineCMS is a content management system based on PHP+MySql. A file upload vulnerability exists in the swfupload function in Api.php in FineCMS version 5.0.8, which can be exploited by remote attackers to upload arbitrary files...
b2evolution 6.8.8 Shell Upload Vulnerability
b2evolution version 6.8.8 Stable suffers from a remote shell upload vulnerability. Exploit Title: Remote File Upload Vulnerability in b2evolution 6.8.8 Google Dork: no Date: 14-03-2017 Exploit Author: @runggareksya, @dvnrcy, @yokoacc Vendor Homepage: http://b2evolution.net Software Link:...
Multiple Vulnerabilities in Wordpress Themes Qualifire
WordPress is a blogging platform developed using the PHP language that allows users to set up their weblogs on servers that support PHP and MySQL databases. A file upload and cross-site request forgery vulnerability exists in Wordpress Themes Qualifire, which can be exploited by remote attackers ...