CVE-2008-6944

CVE-2008-6944 describes an unrestricted file upload vulnerability in ScriptsFeed Auto Classifieds. Remote authenticated users could upload a file with an executable extension as a profile logo and then access it directly via cars_images/ to execute arbitrary code. The issue is caused by improper ...

CVE-2008-6948

The CVE-2008-6948 entry describes an Unrestricted file upload vulnerability in Collabtive 0.4.8. A remote authenticated user can upload a file with an executable extension and a text/plain MIME type, then access it via a direct request to the file in the files/ directory to execute arbitrary code...

CVE-2008-6928

Unrestricted file upload vulnerability in PHPStore Complete Classifieds allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a logo, then accessing it via a direct request to the file in classifieds1/yellowimages/...

CVE-2008-6932

Unrestricted file upload vulnerability in submitfile.php in AlstraSoft SendIt Pro allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in send/files/...

CVE-2008-6931

Unrestricted file upload vulnerability in PHPStore Job Search aka PHPCareers allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a resume photo, then accessing it via a direct request to the file in jobseekers/jobseekerprofileimages...

CVE-2008-6928

CVE-2008-6928 affects PHPStore Complete Classifieds. The vulnerability is an unrestricted file upload that allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a logo, then accessing it via a direct request to classifieds1/yellow_images/....

CVE-2008-6930

The CVE-2008-6930 entry describes an Unrestricted file upload in PHPStore Real Estate, allowing remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a logo and then accessing it via realty/re_images/. The vulnerability stems from accepting and h...

CVE-2008-6932

CVE-2008-6932 corresponds to an unrestricted file upload vulnerability in AlstraSoft SendIt Pro (submit_file.php). The underlying issue allows remote attackers to upload a file with an executable extension and then access it directly under send/files/, enabling arbitrary code execution. The NVD r...

CVE-2008-6929

Unrestricted file upload vulnerability in PHPStore Auto Classifieds allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a logo, then accessing it via a direct request to the file in cars/carsimages/...

CVE-2008-6929

CVE-2008-6929 describes an unrestricted file upload in PHPStore Auto Classifieds that allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a logo and accessing it via a direct URL in cars/cars_images/. The vulnerability arises from accept...

CVE-2008-6932

Unrestricted file upload vulnerability in submitfile.php in AlstraSoft SendIt Pro allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in send/files/...

CVE-2008-6918

Unrestricted file upload vulnerability in admin/galeria.php in ThePortal2 2.2 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in galeria/...

ewebeditor v6. 0. 0 version vulnerability-vulnerability warning-the black bar safety net

Source: zake’s blog Today and still the stream chat, he said ewebeditor out the latest vulnerabilities. So is the test, this app explosion vulnerability are generally directly upload vulnerability, but Yes, upload vulnerability. The first locally to build an ASP environment, to rename a Trojan...

CVE-2008-6900

Unrestricted file upload vulnerability in "Add Pen/Author Name" feature in addpen.php in AvailScript Article Script allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in photos/...

Unrestricted file upload

Unrestricted file upload vulnerability in "Add Pen/Author Name" feature in addpen.php in AvailScript Article Script allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in photos/...

CVE-2008-6902

Unrestricted file upload vulnerability in uploadflyer.php in 2532designs 2532|Gigs 1.2.2 Stable allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in flyers/...

CVE-2008-6902

Unrestricted file upload vulnerability in uploadflyer.php in 2532designs 2532|Gigs 1.2.2 Stable allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in flyers/...

CVE-2008-6900

CVE-2008-6900 : Unrestricted file upload in AvailScript Article Script (Add Pen/Author Name via addpen.php) allows remote authenticated users to upload a file with an executable extension and access it under photos/, enabling arbitrary code execution. CVSSv2 vector: AV:N/AC:L/Au:S/C:P/I:P/A:P wit...

CVE-2008-6902

CVE-2008-6902 affects the 2532|Gigs product (2532designs) <= 1.2.2 Stable. The vulnerability is an unrestricted file upload in upload_flyer.php that allows a remote attacker to upload a file with an executable extension and access it under flyers/, potentially enabling arbitrary code execution...

CVE-2008-6900

Unrestricted file upload vulnerability in "Add Pen/Author Name" feature in addpen.php in AvailScript Article Script allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in photos/...