178 matches found
CVE-2007-1139
Unrestricted file upload vulnerability in Cromosoft Simple Plantilla PHP SPP allows remote attackers to upload arbitrary scripts via a filename with a double extension...
CVE-2007-1139: Improper Control of Generation of Code
Unrestricted file upload vulnerability in Cromosoft Simple Plantilla PHP SPP allows remote attackers to upload arbitrary scripts via a filename with a double extension...
How to break through 5 1. net command filtering-vulnerability warning-the black bar safety net
Article author: analysist To be honest, 5 1. net kinda makes me sad, although I have used it in the virtual host service for almost a year, but also not a successful SSH up I change my password, maybe I'm stupid, But am I really that stupid? Even though I have been so stupid, why did I give you a...
CVE-2005-3430
Incomplete blacklist vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to upload and execute arbitrary script files by giving the files specific extensions, such as 1 .unk, 2 .asa, and possibly 3 .htr and 4 .aspx, which are not filtered like the .asp extension...
CVE-2005-0743
The custom avatar uploading feature uploader.php for XOOPS 2.0.9.2 and earlier allows remote attackers to upload arbitrary PHP scripts, whose file extensions are not filtered...
CVE-2004-1386
TikiWiki before 1.8.4.1 does not properly verify uploaded images, which could allow remote attackers to upload and execute arbitrary PHP scripts, a different vulnerability than CVE-2005-0200...
[SA13657] e107 Image Manager File Upload Vulnerability
TITLE: e107 Image Manager File Upload Vulnerability SECUNIA ADVISORY ID: SA13657 VERIFY ADVISORY: http://secunia.com/advisories/13657/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: e107 0.x http://secunia.com/product/1927/ DESCRIPTION: sysbug has reported a...
JSBoard 2.0.x - Arbitrary Script Upload
JSBoard 2.0.x - Arbitrary Script Upload source: https://www.securityfocus.com/bid/11983/info JSBoard is reported prone to a vulnerability that can allow a remote attacker to upload arbitrary PHP scripts to a vulnerable server. This issue results from insufficient sanitization of user-supplied...
JSBoard Remote Arbitrary Script Upload
Binary data 2464.prm...
MediaWiki 1.3.x - Arbitrary Script Upload
source: https://www.securityfocus.com/bid/11985/info MediaWiki is reported prone to a vulnerability that can allow a remote attacker to upload arbitrary PHP scripts to a vulnerable server. This issue results from insufficient sanitization of user-supplied input. If successful, the attacker can...
[SA13358] Big Medium Unspecified Script Upload Vulnerability
TITLE: Big Medium Unspecified Script Upload Vulnerability SECUNIA ADVISORY ID: SA13358 VERIFY ADVISORY: http://secunia.com/advisories/13358/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: Big Medium 1.x http://secunia.com/product/4349/ DESCRIPTION: A vulnerabilit...
phpGroupWare Calendar Module Holiday File Save Extension Feature Arbitrary File Execution
It has been reported that the version of phpGroupWare hosted on the remote web server may be affected by a vulnerability that allows remote attackers to upload scripts and then execute them on the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-1999-0268
MetaInfo MetaWeb web server is vulnerable to remote command execution and arbitrary file read via path traversal. Multiple connected sources (Red Hat advisory, EUVD, CVE records, Nessus plugin) describe that an attacker can upload, execute and read scripts, with traversal using ../ in requests en...
CVE-1999-0268
MetaInfo MetaWeb web server allows users to upload, execute, and read scripts...
CVE-1999-0268: Undefined Security Weakness
MetaInfo MetaWeb web server allows users to upload, execute, and read scripts...
Bajie WebServer 0.78/0.90 - Remote Command Execution
source: https://www.securityfocus.com/bid/2388/info It is possible to execute arbitrary commands on a host running Bajie Webserver. A remote user can use Bajie's built-in upload feature to place malicious scripts on Bajie webservers. These uploaded scripts are placed in known destination...
Bajie WebServer 0.780.90 - Remote Command Execution
Bajie WebServer 0.780.90 - Remote Command Execution source: https://www.securityfocus.com/bid/2388/info It is possible to execute arbitrary commands on a host running Bajie Webserver. A remote user can use Bajie's built-in upload feature to place malicious scripts on Bajie webservers. These...