[SA13657] e107 Image Manager File Upload Vulnerability

TITLE: e107 Image Manager File Upload Vulnerability SECUNIA ADVISORY ID: SA13657 VERIFY ADVISORY: http://secunia.com/advisories/13657/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: e107 0.x http://secunia.com/product/1927/ DESCRIPTION: sysbug has reported a...

JSBoard Remote Arbitrary Script Upload

Binary data 2464.prm...

JSBoard 2.0.x - Arbitrary Script Upload

JSBoard 2.0.x - Arbitrary Script Upload source: https://www.securityfocus.com/bid/11983/info JSBoard is reported prone to a vulnerability that can allow a remote attacker to upload arbitrary PHP scripts to a vulnerable server. This issue results from insufficient sanitization of user-supplied...

MediaWiki 1.3.x - Arbitrary Script Upload

source: https://www.securityfocus.com/bid/11985/info MediaWiki is reported prone to a vulnerability that can allow a remote attacker to upload arbitrary PHP scripts to a vulnerable server. This issue results from insufficient sanitization of user-supplied input. If successful, the attacker can...

[SA13358] Big Medium Unspecified Script Upload Vulnerability

TITLE: Big Medium Unspecified Script Upload Vulnerability SECUNIA ADVISORY ID: SA13358 VERIFY ADVISORY: http://secunia.com/advisories/13358/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: Big Medium 1.x http://secunia.com/product/4349/ DESCRIPTION: A vulnerabilit...

phpGroupWare Calendar Module Holiday File Save Extension Feature Arbitrary File Execution

It has been reported that the version of phpGroupWare hosted on the remote web server may be affected by a vulnerability that allows remote attackers to upload scripts and then execute them on the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-1999-0268

MetaInfo MetaWeb web server is vulnerable to remote command execution and arbitrary file read via path traversal. Multiple connected sources (Red Hat advisory, EUVD, CVE records, Nessus plugin) describe that an attacker can upload, execute and read scripts, with traversal using ../ in requests en...

CVE-1999-0268

MetaInfo MetaWeb web server allows users to upload, execute, and read scripts...

Bajie WebServer 0.780.90 - Remote Command Execution

Bajie WebServer 0.780.90 - Remote Command Execution source: https://www.securityfocus.com/bid/2388/info It is possible to execute arbitrary commands on a host running Bajie Webserver. A remote user can use Bajie's built-in upload feature to place malicious scripts on Bajie webservers. These...

Bajie WebServer 0.78/0.90 - Remote Command Execution

source: https://www.securityfocus.com/bid/2388/info It is possible to execute arbitrary commands on a host running Bajie Webserver. A remote user can use Bajie's built-in upload feature to place malicious scripts on Bajie webservers. These uploaded scripts are placed in known destination...

CVE-1999-0268

MetaInfo MetaWeb web server allows users to upload, execute, and read scripts...