CVE-2017-11151

A vulnerability in synothemeupload.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to upload arbitrary files without authentication via the logoupload action...

Photo Manager Pro v4.4.0 iOS - File Include Vulnerability

Document Title: =============== Photo Manager Pro v4.4.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1445 Release Date: ============= 2015-03-12 Vulnerability Laboratory ID VL-ID: ====================================...

Photo Manager Pro 4.4.0 iOS - Local File Inclusion

Photo Manager Pro 4.4.0 iOS - Local File Inclusion Document Title: =============== Photo Manager Pro v4.4.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1445 Release Date: ============= 2015-03-12 Vulnerability...

CVE-2013-4429

Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 does not properly restrict access to artefacts, which allows remote authenticated users to read arbitrary artefacts via the 1 artefact id in an upload action when creating a journal or 2 instconfartefactidselectedID parameter in an...

CVE-2013-5688

Multiple directory traversal vulnerabilities in index.php in AjaXplorer 5.0.2 and earlier allow remote authenticated users to read arbitrary files via a ../%00 dot dot backslash encoded null byte in the file parameter in a 1 download or 2 getcontent action, or 3 upload arbitrary files via a ../%0...

PT-2011-5160

Name of the Vulnerable Software and Affected Versions QuiXplorer versions 2.3 and earlier Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension using the "upload action" to "index.php", then accessing it via a direct request to th...

LionWiki 3.X (index.php) Shell Upload Vulnerability

Exploit for php platform in category web applications =================================================== LionWiki 3.X index.php Shell Upload Vulnerability =================================================== Exploit Title: LionWiki 3.X index.php upload shell Date: monday 05 april 2010 Author:...