6825 matches found
CVE-2008-0222
Unrestricted file upload vulnerability in ajaxfilemanager.php in the Wp-FileManager 1.2 plugin for WordPress allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors...
CVE-2007-5401
Unrestricted file upload vulnerability in uploadrequest.asp in Layton HelpBox 3.7.1 allows remote authenticated users to upload and execute arbitrary ASP files, related to not properly checking file extensions...
CVE-2007-6668
CVE-2007-6668 affects admin/uploadgames.php in MySpace Content Zone (MCZ) 3.x, where a missing requirement for administrative privileges enables remote attackers to upload arbitrary files (demonstrated with a .php file and a .php%00.jpeg). The connected records confirm the vulnerability’s existen...
CVE-2007-6650
Unrestricted file upload vulnerability in fisheye/upload.php in Bitweaver R2 CMS allows remote attackers to upload arbitrary files by using the image/gif content type, and possibly other image and PDF content types, as demonstrated by uploading a .htaccess file...
CVE-2007-6650
Unrestricted file upload vulnerability in fisheye/upload.php in Bitweaver R2 CMS allows remote attackers to upload arbitrary files by using the image/gif content type, and possibly other image and PDF content types, as demonstrated by uploading a .htaccess file...
Directory traversal
Directory traversal vulnerability in upload.dll in BadBlue 2.72b and earlier allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the filename parameter...
Limited upload directory traversal in HTTP File Server 2.2a / 2.3 beta (build #146)
Luigi Auriemma Application: HTTP File Server http://www.rejetto.com/hfs/ Versions: = 2.2a and = 2.3 beta build 146 Platforms: Windows Bug: limited directory traversal in files uploading Exploitation: remote Date: 05 Dec 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...
CVE-2007-5845
Directory traversal vulnerability in error.php in GuppY 4.6.3, 4.5.16, and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the id parameter. NOTE: this can be leveraged to bypass authentication and upload arbitrary files by including...
GuppY 4.6.3 - index.php?selskin Remote File Inclusion
GuppY 4.6.3 - index.php?selskin Remote File Inclusion vuln.: GuppY 4.6.3 includes.inc selskin Remote File Inclusion script info and download: http://www.freeguppy.org/ dork: "Site powered by GuppY" author: irk4zatyahoo.pl greets to: str0ke, rgod, polish under :...
CVE-2007-5734
Unrestricted file upload vulnerability in eFileMan 7.1.0.87-88 allows remote attackers to upload arbitrary files, with "uploads/uploadfile." destination filenames, via unspecified vectors to upload.cgi, accessed from upload.html...
CVE-2007-5734
Unrestricted file upload vulnerability in eFileMan 7.1.0.87-88 allows remote attackers to upload arbitrary files, with "uploads/uploadfile." destination filenames, via unspecified vectors to upload.cgi, accessed from upload.html...
CVE-2007-5737
Technical details about CVE-2007-5737 are not publicly provided in the supplied documents. The description notes an unrestricted file upload in Korean GHBoard, but no affected versions, vectors, or fixes are given here. Monitor for updates.
CVE-2007-5737
Unrestricted file upload vulnerability in component/upload.jsp in Korean GHBoard allows remote attackers to upload arbitrary files via unspecified vectors, probably involving a direct request...
Simple PHP Blog (sphpblog) <= 0.5.1 Multiple Vulnerabilities
No description provided by source. Title: Simple PHP Blog sphpblog = 0.5.1 Multiple Vulnerabilities Vendor: http://sourceforge.net/projects/sphpblog/ Advisory: http://acid-root.new.fr/?0:15 Author: DarkFig gmdarkfig at gmail dot com Released on: 2007/10/21 Changelog: ---------- L M H T Summary: I...
koreanghboard-multi.txt
Software : Korean GHBoard Site : http://www.ghlab.com/ Found by : Xcross87 1. File Upload Vulnerability Xploit : victim.com/ghboard/component/upload.jsp 2. FlashUpload component File Upload and File Download Vulnerability Upload Xploit : victim.com/ghboard/component/flashupload/upload.html Not...
Nine smart built Station V5. 2 small holes two-vulnerability and early warning-the black bar safety net
One is the injection vulnerability, newshow. asp id parameter is the presence of injection vulnerabilities, you can guess the member table, get the user account password. The second is upload vulnerability in resource management where you can capture and upload the asp file...
Simple PHP Blog (sPHPblog) 0.5.1 - Multiple Vulnerabilities
Title: Simple PHP Blog sphpblog Released on: 2007/10/21 Changelog: ---------- L M H T Summary: Ip Spoofing X X Cross Site Scripting X X Session Fixation X X mail CRLF Injection X Local File Inclusion +CSRF X X File Deletion +CSRF X X File Upload Vulnerability X X Code Execution +CSRF X X Legend: ...
Design/Logic Flaw
CMS Made Simple 1.1.3.1 does not check the permissions assigned to users who attempt uploads, which allows remote authenticated users to upload unspecified files via unknown vectors...