CVE-2008-5283

Google Hack Honeypot GHH File Upload Manager 1.3 allows remote attackers to delete uploaded files via unknown vectors related to the delall action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. CVE analysis suggests...

LoveCMS 1.6.2 Final (Download Manager 1.0) File Upload Exploit

No description provided by source. ?php / LoveCMS 1.6.2 Final Download Manager v1.0 Arbitrary File Upload Exploit Discovered && Exploited by cOndemned Download: http://www.thethinkingman.net/modules/downloadmanager/?id=16 Description: This exploit allows attacker to upload any type of file no...

Google Hack Honeypot File Upload Manager 1.3 - delall Unauthorized File Access

Google Hack Honeypot File Upload Manager 1.3 - delall Unauthorized File Access source: https://www.securityfocus.com/bid/27877/info Google Hack Honeypot File Upload Manager is prone to an unauthorized file-access vulnerability. This issue occurs because the application fails to validate users...

Google Hack Honeypot File Upload Manager 1.3 - 'delall' Unauthorized File Access

source: https://www.securityfocus.com/bid/27877/info Google Hack Honeypot File Upload Manager is prone to an unauthorized file-access vulnerability. This issue occurs because the application fails to validate users before processing a certain HTTP request. Attackers can exploit this issue to dele...

Sql injection

Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System JBS 2.0, and possibly JiRo's Upload Manager aka JiRo's Upload System or JUS, allow remote attackers to execute arbitrary SQL commands via the 1 Username aka Login or Email or 2 Password field...

CVE-2007-6091

CVE-2007-6091 relates to multiple SQL injection vulnerabilities in JiRo’s Banner System (JBS) 2.0, and possibly JiRo’s Upload Manager (JUS). The flaws reside in the login routine (files/login.asp), where the attacker can inject via the (1) Username (Login/Email) or (2) Password fields to execute ...

JiRos Upload Manager SQL Injection

Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal Vendor: http://www.jiros.ne Google Search: JBS v2.0, Powered by JiRoґs.Net Path: files/login.asp Username: anything' OR 'x'='x Password: anything' OR 'x'='x Regards, The-0utl4w Credits Goes To...

CVE-2006-6813

CVE-2006-6813 affects Mxmania File Upload Manager (FUM) up to version 1.0.6. The vulnerability is an SQL injection in detail.asp via the ID parameter, allowing remote attackers to execute arbitrary SQL commands. This is documented in NVD records for CVE-2006-6813. The connected documents confirm ...

File Upload Manager <= 1.0.6 (detail.asp) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: File Upload Manager = 1.0.6 detail.asp Remote SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.mxmania.net $$ : 29.99 . .. : ajann,Turkey use IO::Socket; if@ARGV 1 print "...

File Upload Manager <= 1.0.6 (detail.asp) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================================== File Upload Manager : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n";...

File Upload Manager 1.0.6 - detail.asp SQL Injection

File Upload Manager 1.0.6 - detail.asp SQL Injection !/usr/bin/perl Script Name: File Upload Manager : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User : "; $ID = ; chop $ID; if $ID =...

CVE-2006-5617

Directory traversal vulnerability in index.php in Thepeak File Upload Manager 1.3 allows remote attackers to read or download arbitrary files via a base64-encoded file path containing a .. dot dot sequence in the file parameter...

Thepeak File Upload v1.3 : Read file vulneability

Thepeak File Upload v1.3 : Read file vulneability Discovered By: Phm c Hi Pham Duc Hai Email: duchaikhtn at gmail dot com YIM : kikicoco1985vn Website: http://blog.ajaxviet.com ------------------------- Description: file upload manager 1.3 written by thepeak adam medici copyright c 2003 thepeak o...

CVE-2005-1957

mtnpeak.net File Upload Manager does not properly check user authentication for certain actions, which allows remote attackers to provide a modified base64-encoded file parameter and 1 read arbitrary files via the "view" action or 2 delete arbitrary files via the del action...

CVE-2005-1956

File Upload Manager allows remote attackers to upload arbitrary files by modifying the test variable to contain a value of '' six tildes, which bypasses the file extension checks...

CVE-2005-1957

The vulnerability concerns mtnpeak.net File Upload Manager, where an improper authentication check allows a remote attacker to modify a base64-encoded file parameter to perform privileged actions. Specifically, the affected component may be exploited to (1) read arbitrary files via the view actio...

CVE-2005-1956

This CVE (CVE-2005-1956) involves a file upload vulnerability where remote attackers can upload arbitrary files by setting a test variable to '~~~~~~' (six tildes), bypassing file-extension checks. The underlying issue is bypassing input/validation logic to allow non-conforming file types. Outcom...

CVE-2005-1957

mtnpeak.net File Upload Manager does not properly check user authentication for certain actions, which allows remote attackers to provide a modified base64-encoded file parameter and 1 read arbitrary files via the "view" action or 2 delete arbitrary files via the del action...

CVE-2005-1956

File Upload Manager allows remote attackers to upload arbitrary files by modifying the test variable to contain a value of '' six tildes, which bypasses the file extension checks...