Lucene search
+L

47 matches found

Cvelist
Cvelist
added 2012/02/25 2:0 a.m.27 views

CVE-2012-0364

Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allow remote attackers to replace the configuration file via an upload request to an unspecified URL, aka Bug ID CSCtw55495...

6.9AI score0.01203EPSS
SaveExploits0References2
Prion
Prion
added 2011/06/16 11:55 p.m.19 views

Path traversal

The rfc1867posthandler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks, and possibly create or overwrite arbitrary files, via a crafted upload request...

6.4CVSS7.5AI score0.19736EPSS
SaveExploits2References21Affected Software1
CVE
CVE
added 2011/06/16 11:0 p.m.167 views

CVE-2011-2202

CVE-2011-2202 details (from provided sources): In PHP before 5.3.7, rfc1867_post_handler in main/rfc1867.c does not properly restrict filenames in multipart/form-data POST requests, enabling remote attackers to perform absolute path traversal via a crafted upload and possibly create or overwrite ...

6.4CVSS8.1AI score0.19736EPSS
SaveExploits2References21Affected Software1
Cvelist
Cvelist
added 2011/05/03 10:0 p.m.27 views

CVE-2011-1607

Directory traversal vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su3, 7.x before 7.15bsu3, 8.0 before 8.03asu1, and 8.5 before 8.51 allows remote authenticated users to upload files to arbitrary directories via a modified pathname in an uploa...

6.4AI score0.02261EPSS
SaveExploits0References7
NVD
NVD
added 2011/04/18 6:55 p.m.20 views

CVE-2010-4229

Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management ZAM in Novell ZENworks Configuration Management 10.3 before 10.3.2, and 11, allows remote attackers to overwrite files, and subsequently execute arbitrary code, via directory...

10CVSS7.2AI score0.25428EPSS
SaveExploits5References9
Prion
Prion
added 2011/04/18 3:0 p.m.16 views

Directory traversal

Directory traversal vulnerability in the Heartbeat Web Service in CA.Itm.Server.ManagementWS.dll in the Management Server in CA Total Defense TD r12 before SE2 allows remote attackers to execute arbitrary code via directory traversal sequences in the GUID parameter in an upload request to...

7.5CVSS8.3AI score0.11423EPSS
SaveExploits0References9Affected Software1
Prion
Prion
added 2009/11/23 5:30 p.m.19 views

Directory traversal

Multiple directory traversal vulnerabilities in Home FTP Server 1.10.1.139 allow remote authenticated users to 1 create arbitrary directories via directory traversal sequences in an MKD command or 2 create files with any contents in arbitrary directories via directory traversal sequences in a fil...

4CVSS7AI score0.03544EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder