GoAutoDial CE 2.0 - Arbitrary File Upload

GoAutoDial CE 2.0 - Arbitrary File Upload Title : GoAutoDial CE 2.0 Shell Upload Date : 28/02/2015 Author : R-73eN Software : GoAutoDial CE 2.0 Tested : On Linux vicisrv.loc 2.6.18-238.9.1.el5.goPAE 1 GoAutoDial CE 2.0 import socket import sys banner = "\n\n" banner +=" \n" banner +=" | | / | / |...

GLPI 0.85.2 Shell Upload / Privilege Escalation

Multiple vulnerabilities have been identified in GLPI http://www.glpi-project.org. 1/ Arbitrary file upload Severity: Important Versions Affected =========== All versions between 0.85 and 0.85.2 Description ======= When an user wants to create a new ticket, he has the possibility to add an...

GuppY CMS 5.0.9 / 5.00.10 CSRF / Shell Upload

!-- Exploit Title: GuppY CMS 5.0.9 & 5.00.10 Multiple CSRF Vulnerabilities-Privilege escalation/File upload. Other versions may be vulnerable but weren't tested. Date: 2/17/2015 Exploit Author: Brandon Murphy Vendor Homepage: http://freeguppy.org Software Link: Windows-5.00.10...

GuppY CMS 5.0.9 & 5.00.10 CSRF / Shell Upload Vulnerabilities

GuppY CMS versions 5.0.9 and 5.00.10 suffer from cross site request forgery and remote shell upload vulnerabilities. !-- Exploit Title: GuppY CMS 5.0.9 & 5.00.10 Multiple CSRF Vulnerabilities-Privilege escalation/File upload. Other versions may be vulnerable but weren't tested. Date: 2/17/2015...

Restaurantbiller SQL Injection / Shell Upload

=================================================================================== + TITLE : Restaurantbiller Multiple Vulnerabilities + VENDOR : http://www.demo.restaurantbiller.com/ + VERSION : - + AUTHOR : R3vanBastard + TESTED ON : Windows + DORK : "Powered by Restaurant Biller"...

WordPress WP Symposium 14.11 Shell Upload Exploit

Exploit for php platform in category remote exploits This module requires Metasploit: http://www.metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'WordPress WP Symposium 14.11 Shell Upload', 'Description' = %qWP Symposium...

WordPress Symposium Plugin 14.11 - Shell Upload

Symposium plugin is prone to a shell upload vulnerability. It allows an attacker to execute arbitrary PHP code by making a direct request to the uploaded .php file. Solution Update the plugin...

CVE-2014-10021

creationtimestamp| type| source ---|---|--- 2015-01-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35778 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wpsymposiumshellupload.rb 2025-10-23 21:12:57+00:00|...

WordPress WP Symposium 14.11 Shell Upload

This module requires Metasploit: http://www.metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'WordPress WP Symposium 14.11 Shell Upload', 'Description' = %qWP Symposium Plugin for WordPress contains a flaw that allows a...

Incom CMS SQL Injection

Exploit Title: Incom Cms Admin Bypass Vulnerability Google Dork: intext:"incom cms" . intext:"site by overron" . intitle:"INCOM CMS" Date: 2014-12-29 Exploit Author: Xodiak Vendor Homepage: http://facebook.com/xodiakbalckhat Software Link: http://incomcms.com Version: All Version Tested on: Kali ...

RStickets! 1.0.0 Remote Shell Upload

RStickets! RSTickets!" is no longer sold / developed POC: Upload shell.php.zip from the form and the shell will be uploaded to the server on this path components/comrstickets/files/ and it will be executable May be another versions are vulnerable also to the same vulnerability = XSS In name...

RSform!Pro 1.3.0 Remote Shell Upload

RSform!Pro There is a reflected XSS Vulnerability in the form .. Birthdate parameter alert1337...

Wordpress Wp Symposium 14.11 - Unauthenticated Shell Upload Exploit

Exploit for php platform in category web applications !/usr/bin/python Exploit Name: Wordpress WP Symposium 14.11 Shell Upload Vulnerability Vulnerability discovered by Claudio Viviani Exploit written by Claudio Viviani 2014-11-27: Discovered vulnerability 2014-12-01: Vendor Notification Twitter...

WP Symposium <= 14.11 - Unauthenticated Shell Upload

The wp-symposium WordPress plugin was affected by an Unauthenticated Shell Upload security vulnerability...

WordPress WP Symposium 14.11 Shell Upload

WP Symposium Plugin for WordPress contains a flaw that allows a remote attacker to execute arbitrary PHP code. This flaw exists because the /wp-symposium/server/fileuploadform.php script does not properly verify or sanitize user-uploaded files. By uploading a .php file, the remote system will pla...

Slider Revolution/Showbiz Pro shell upload exploit

!/usr/bin/perl Title: Slider Revolution/Showbiz Pro shell upload exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Discovered: 15 October 2014 Coded: 15 October 2014 Updated: 25 November 2014 Published: 25 November 2014 MorXploit Research http://www.MorXploit.com Vendor: ThemePunch...

Slider Revolution/Showbiz Pro Shell Upload Exploit

Exploit for php platform in category web applications !/usr/bin/perl Title: Slider Revolution/Showbiz Pro shell upload exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Discovered: 15 October 2014 Coded: 15 October 2014 Updated: 25 November 2014 Published: 25 November 2014 MorXploit...

WordPress Slider Revolution Plugin 3.0.95 - Shell Upload Exploit

This plugin cannot check authentication in revslideradmin.php/showbizadmin.php which allows an attacker to abuse administrative features for the example, creating or deleting sliders, importing or exporting sliders, etc.. Solution Update the plugin...

Slider Revolution/Showbiz Pro Shell Upload

!/usr/bin/perl Title: Slider Revolution/Showbiz Pro shell upload exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Discovered: 15 October 2014 Coded: 15 October 2014 Updated: 25 November 2014 Published: 25 November 2014 MorXploit Research http://www.MorXploit.com Vendor: ThemePunch...

WordPress Plugin Slider REvolution 3.0.95 Showbiz Pro 1.7.1 - Arbitrary File Upload

WordPress Plugin Slider REvolution 3.0.95 Showbiz Pro 1.7.1 - Arbitrary File Upload !/usr/bin/perl Title: Slider Revolution/Showbiz Pro shell upload exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Discovered: 15 October 2014 Coded: 15 October 2014 Updated: 25 November 2014 Published:...