CVE-2017-17560

CVE-2017-17560 affects Western Digital MyCloud PR4100 devices (2.30.172). The web management component at /web/jquery/uploader/multi_uploadify.php exposes multipart file upload without authentication, enabling an attacker to place arbitrary files anywhere on the device and upload a PHP shell, lea...

CVE-2017-17560

An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices. The web administration component, /web/jquery/uploader/multiuploadify.php, provides multipart upload functionality that is accessible without authentication and can be used to place a file anywhere on the device's file...

WordPress flickr-picture-backup Arbitrary File Upload Vulnerability

WordPress is the WordPress Software Foundation a set of blogging platform developed using the PHP language, the platform supports in PHP and MySQL servers set up a personal blog site.WordPress flickr-picture-backup is a picture backup plugin developed for WordPress. An arbitrary file upload...

CVE-2017-11151

A vulnerability in synothemeupload.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to upload arbitrary files without authentication via the logoupload action...

CVE-2017-1000081

Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications .oar resulting in remote code execution...

CVE-2017-1000081

Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications .oar resulting in remote code execution...

Remote code execution

Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications .oar resulting in remote code execution...

CVE-2017-1000081

Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications .oar resulting in remote code execution...

CVE-2017-1000081

CVE-2017-1000081 affects Linux Foundation ONOS 1.9.0 and is due to unauthenticated upload of applications (.oar), enabling remote code execution. Primary sources (NVD) cite high/critical impacts (CVSSv2: 7.5/Partial partial integrity and availability; CVSSv3.1: 9.8 with high impact and network at...

flickr-picture-backup <= 0.7 - Unauthenticated File Upload

The flickr-picture-backup WordPress plugin was affected by an Unauthenticated File Upload security vulnerability...

Arbitrary file upload vulnerability in the $_FILES ['ttsFile'] and $_POST['taskid'] parameters of the Mixcall agent management system.

Mixcall seat management system is based on B/S architecture, the management personnel can directly log into the Mixcall seat management center through the computer, and view the detailed situation related to the seat personnel's voice services. An arbitrary file upload vulnerability exists in the...

CVE-2016-1000112

Unauthenticated remote .jpg file upload in contus-video-comments v1.0 wordpress plugin...

CVE-2016-1000112

Unauthenticated remote .jpg file upload in contus-video-comments v1.0 wordpress plugin...

CVE-2016-1000112

Affected software : WordPress plugin contus-video-comments v1.0. Vulnerability : Unauthenticated remote upload of .jpg files via the contus-video-comments plugin, enabling an attacker to upload arbitrary files. The issue is described consistently across CVE-2016-1000112 entries and CNVD/PATCHSTAC...

BuilderEngine 3.5.0 - Arbitrary File Upload

Exploit for php platform in category web applications 0day.today 2018-04-14...

Easy Hosting Control Panel 0.37.9 Bypass / File Upload / Disclosure

EHCP Easy Hosting Control Panel Multiple Vulnerabilities - Clear Text MySQL Root Password Insufficiently Protected Sensitive Data Authentication Bypass Unauthenticated Arbitrary File Upload Software Links: https://launchpad.net/ehcp http://www.ehcp.net https://sourceforge.net/p/ehcp/wiki/...

WordPress Ultimate Product Catalogue Plugin Unauthenticated File Upload

An unauthorized file upload vulnerability exists in WordPress Ultimate Product Catalogue Plugin. A remote attacker could exploit this vulnerability by uploading a file to a server running the vulnerable application. Successful exploitation of this vulnerability could allow a remote attacker to...

Arbitrary File Upload Vulnerability in Hsort Newspaper Management System

Hsort Newspaper Management System is a set of software for newspapers, magazines, digital version of the publication, update software, just contain the article content of the plain text for simple identification, can be quickly generated by this software according to the template of the entire si...

Seagate Central unauthenticated file upload

Added: 06/09/2015 Background Seagate Central is a personal cloud storage device which can be connected to a wireless router. Problem Seagate Central has no root password, allowing unauthenticated users to upload arbitrary files via PHP. This can be leveraged to execute arbitrary commands by...

Seagate Central unauthenticated file upload

Added: 06/09/2015 Background Seagate Central is a personal cloud storage device which can be connected to a wireless router. Problem Seagate Central has no root password, allowing unauthenticated users to upload arbitrary files via PHP. This can be leveraged to execute arbitrary commands by...