CVE-2008-5283

Google Hack Honeypot GHH File Upload Manager 1.3 allows remote attackers to delete uploaded files via unknown vectors related to the delall action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. CVE analysis suggests...

CVE-2008-5283

The CVE concerns Google Hack Honeypot (GHH) File Upload Manager 1.3. The vulnerability enables remote attackers to delete uploaded files via unknown vectors related to the delall action to index.php. This is stated in multiple sources, though the exact exploit vectors are not disclosed in the pro...

CVE-2008-5283: Undefined Security Weakness

Google Hack Honeypot GHH File Upload Manager 1.3 allows remote attackers to delete uploaded files via unknown vectors related to the delall action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. CVE analysis suggests...

LoveCMS 1.6.2 Final (Download Manager 1.0) File Upload Exploit

No description provided by source. ?php / LoveCMS 1.6.2 Final Download Manager v1.0 Arbitrary File Upload Exploit Discovered && Exploited by cOndemned Download: http://www.thethinkingman.net/modules/downloadmanager/?id=16 Description: This exploit allows attacker to upload any type of file no...

Google Hack Honeypot File Upload Manager 1.3 - delall Unauthorized File Access

Google Hack Honeypot File Upload Manager 1.3 - delall Unauthorized File Access source: https://www.securityfocus.com/bid/27877/info Google Hack Honeypot File Upload Manager is prone to an unauthorized file-access vulnerability. This issue occurs because the application fails to validate users...

Google Hack Honeypot File Upload Manager 1.3 - 'delall' Unauthorized File Access

source: https://www.securityfocus.com/bid/27877/info Google Hack Honeypot File Upload Manager is prone to an unauthorized file-access vulnerability. This issue occurs because the application fails to validate users before processing a certain HTTP request. Attackers can exploit this issue to dele...

Sql injection

Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System JBS 2.0, and possibly JiRo's Upload Manager aka JiRo's Upload System or JUS, allow remote attackers to execute arbitrary SQL commands via the 1 Username aka Login or Email or 2 Password field...

CVE-2007-6091: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System JBS 2.0, and possibly JiRo's Upload Manager aka JiRo's Upload System or JUS, allow remote attackers to execute arbitrary SQL commands via the 1 Username aka Login or Email or 2 Password field...

CVE-2007-6091

CVE-2007-6091 relates to multiple SQL injection vulnerabilities in JiRo’s Banner System (JBS) 2.0, and possibly JiRo’s Upload Manager (JUS). The flaws reside in the login routine (files/login.asp), where the attacker can inject via the (1) Username (Login/Email) or (2) Password fields to execute ...

JiRos Upload Manager SQL Injection

Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal Vendor: http://www.jiros.ne Google Search: JBS v2.0, Powered by JiRoґs.Net Path: files/login.asp Username: anything' OR 'x'='x Password: anything' OR 'x'='x Regards, The-0utl4w Credits Goes To...

CVE-2006-6813

CVE-2006-6813 affects Mxmania File Upload Manager (FUM) up to version 1.0.6. The vulnerability is an SQL injection in detail.asp via the ID parameter, allowing remote attackers to execute arbitrary SQL commands. This is documented in NVD records for CVE-2006-6813. The connected documents confirm ...

CVE-2006-6813: Undefined Security Weakness

SQL injection vulnerability in detail.asp in Mxmania File Upload Manager FUM 1.0.6 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter...

File Upload Manager <= 1.0.6 (detail.asp) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: File Upload Manager = 1.0.6 detail.asp Remote SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.mxmania.net $$ : 29.99 . .. : ajann,Turkey use IO::Socket; if@ARGV 1 print "...

File Upload Manager 1.0.6 - detail.asp SQL Injection

File Upload Manager 1.0.6 - detail.asp SQL Injection !/usr/bin/perl Script Name: File Upload Manager : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User : "; $ID = ; chop $ID; if $ID =...

File Upload Manager <= 1.0.6 (detail.asp) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================================== File Upload Manager : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n";...

CVE-2006-5617

Directory traversal vulnerability in index.php in Thepeak File Upload Manager 1.3 allows remote attackers to read or download arbitrary files via a base64-encoded file path containing a .. dot dot sequence in the file parameter...

CVE-2006-5617: Undefined Security Weakness

Directory traversal vulnerability in index.php in Thepeak File Upload Manager 1.3 allows remote attackers to read or download arbitrary files via a base64-encoded file path containing a .. dot dot sequence in the file parameter...

Thepeak File Upload v1.3 : Read file vulneability

Thepeak File Upload v1.3 : Read file vulneability Discovered By: Phm c Hi Pham Duc Hai Email: duchaikhtn at gmail dot com YIM : kikicoco1985vn Website: http://blog.ajaxviet.com ------------------------- Description: file upload manager 1.3 written by thepeak adam medici copyright c 2003 thepeak o...

CVE-2005-1956

This CVE (CVE-2005-1956) involves a file upload vulnerability where remote attackers can upload arbitrary files by setting a test variable to '~~~~~~' (six tildes), bypassing file-extension checks. The underlying issue is bypassing input/validation logic to allow non-conforming file types. Outcom...

CVE-2005-1957

The vulnerability concerns mtnpeak.net File Upload Manager, where an improper authentication check allows a remote attacker to modify a base64-encoded file parameter to perform privileged actions. Specifically, the affected component may be exploited to (1) read arbitrary files via the view actio...