1382 matches found
WordPress VideoWhisper Video Presentation 3.31.17 - Remote File Upload
WordPress Kernel theme is prone to a remote file upload vulnerability. Because of this vulnerability, anyone can upload the files for the example, .zip, .rar, .mp3, .jpeg, .txt, .html, etc. to an wordpress site. Solution Upgrade the plugin...
VideoWhisper Video Presentation 3.31.17 - Remote File Upload
Vendor marked as won't fix. See references...
VulnCheck KEV: CVE-2014-9735
The ThemePunch Slider Revolution revslider plugin before 3.0.96 for WordPress and Showbiz Pro plugin 1.7.1 and earlier for Wordpress does not properly restrict access to administrator AJAX functionality, which allows remote attackers to 1 upload and execute arbitrary files via an...
CVE-2014-2179
CVE-2014-2179 concerns Cisco RV Series routers (RV120W, RV180, RV180W, RV220W). The issue allows remote attackers to upload files to arbitrary locations via a crafted HTTP request. Affected versions are RV120W firmware prior to 1.0.5.9 and RV180/RV180W firmware prior to 1.0.4.14; RV220W devices a...
PT-2014-6182 · Bmc · Bmc Track-It!
Name of the Vulnerable Software and Affected Versions: BMC Track-It! version 11.3.0.355 Description: The issue allows remote attackers to upload arbitrary files, execute arbitrary code, or obtain sensitive credential and configuration information without requiring authentication on TCP port 9010...
WordPress Plugin Creative Contact Form 0.9.7 - Arbitrary File Upload
========================================================== "Creative Contact Form - The Best WordPress Contact Form Builder" - Arbitrary File Upload Author: Gianni Angelozzi Date: 08/10/2014 Remote: Yes Vendor Homepage: https://profiles.wordpress.org/creative-solutions-1/ Software Link:...
ManageEngine Desktop Central StatusUpdate - Arbitrary File Upload (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'ManageEngine Desktop Central StatusUpdate Arbitrary File Upload', 'Description' = %q This module exploits an arbitrary file upload...
CVE-2014-3349
Cisco Intelligent Automation for Cloud aka Cisco Cloud Portal does not validate file types during the handling of file submission, which allows remote authenticated users to upload arbitrary files via a crafted request, aka Bug ID CSCuh87410...
The Cotton - Remote File Upload
The thecottonv114 WordPress theme was affected by a Remote File Upload security vulnerability...
Bordeaux - Remote File Upload
The bordeaux-theme WordPress theme was affected by a Remote File Upload security vulnerability...
Ray of Light - Remote File Upload
The rayoflight-theme WordPress theme was affected by a Remote File Upload security vulnerability...
Reganto - Remote File Upload
The reganto-theme WordPress theme was affected by a Remote File Upload security vulnerability...
Radial - Remote File Upload
The radial-theme WordPress theme was affected by a Remote File Upload security vulnerability...
Agritourismo - Remote File Upload
The agritourismo-theme WordPress theme was affected by a Remote File Upload security vulnerability...
Bulteno - Remote File Upload
The bulteno-theme WordPress theme was affected by a Remote File Upload security vulnerability...
Rockstar - Remote File Upload
The rockstar-theme WordPress theme was affected by a Remote File Upload security vulnerability...
WP Symposium <= 11.11.26 - Remote File Upload Code Execution
The wp-symposium WordPress plugin was affected by a Remote File Upload Code Execution security vulnerability...
WordPress The Cotton Theme - Remote File Upload Vulnerability
WordPress The Cotton theme is prone to a remote file upload vulnerability. Solution Update the theme...