EUVD-2017-6329

Malware in sbrugna...

CVE-2017-14840

TeamWork TicketPlus allows Arbitrary File Upload in updateProfile...

Design/Logic Flaw

TeamWork TicketPlus allows Arbitrary File Upload in updateProfile...

TeamWork TicketPlus updateProfile Arbitrary File Upload Vulnerability

TeamWork TicketPlus is a ticket management system based on PHP and MySQL. updateProfile is one of the update files. An arbitrary file upload vulnerability exists in updateProfile in TeamWork TicketPlus. A remote attacker can exploit this vulnerability to upload arbitrary files...

CVE-2017-14840: Unrestricted Upload of File with Dangerous Type

TeamWork TicketPlus allows Arbitrary File Upload in updateProfile...

CVE-2017-14840

CVE-2017-14840 affects TeamWork TicketPlus. A vulnerability in updateProfile allows Arbitrary File Upload, enabling an attacker to upload arbitrary files via the updateProfile function. Documented impact from CVSSv3 indicates high severity (Impact: Confidentiality, Integrity, Availability all Hig...

CVE-2017-14840

TeamWork TicketPlus allows Arbitrary File Upload in updateProfile...

TicketPlus - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: TicketPlus - Support Ticket Management System - Arbitrary File Upload Dork: N/A Date: 26.09.2017 Vendor Homepage: http://teamworktec.com/ Software Link:...

PT-2017-13717

Name of the Vulnerable Software and Affected Versions TeamWork TicketPlus affected versions not specified Description The issue allows for Arbitrary File Upload in the updateProfile functionality. Recommendations At the moment, there is no information about a newer version that contains a fix for...

TicketPlus - Arbitrary File Upload

Exploit Title: TicketPlus - Support Ticket Management System - Arbitrary File Upload Dork: N/A Date: 26.09.2017 Vendor Homepage: http://teamworktec.com/ Software Link: https://codecanyon.net/item/ticketplus-support-ticket-management-system/20221316 Demo: http://sportsgrand.com/demo/ticketplus/...