Authentication flaw

An Improper Authentication vulnerability in upload-file.php, used by the J-Web component of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to upload arbitrary files to temporary folders on the device. This issue affects Juniper Networks Junos OS: All versions prior to...

CVE-2023-28962: Improper Authentication

An Improper Authentication vulnerability in upload-file.php, used by the J-Web component of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to upload arbitrary files to temporary folders on the device. This issue affects Juniper Networks Junos OS: All versions prior to...

PT-2023-3306

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 19.4R3-S11 Juniper Networks Junos OS version 20.1R1 and later versions Juniper Networks Junos OS versions prior to 20.2R3-S7 Juniper Networks Junos OS version 20.3R1 and later versions Juniper Networ...

PT-2019-13244

Name of the Vulnerable Software and Affected Versions AROX School-ERP Pro affected versions not specified Description The issue concerns a command execution vulnerability. Specifically, the import stud.php and upload file.php files lack session control, allowing an unauthenticated user to execute...

PT-2019-12361

Name of the Vulnerable Software and Affected Versions osTicket versions prior to 1.12 Description The issue exists due to the possibility of XSS via several API endpoints, including "/upload/file.php", "/upload/scp/users.php?do=import-users", and "/upload/scp/ajax.php/users/import", when an agent...

DesignFolio Plus Theme <= 1.2 - Arbitrary File Upload

Vulnerable File : upload-file.php...

CVE-2015-1172: Undefined Security Weakness

Unrestricted file upload vulnerability in admin/upload-file.php in the Holding Pattern theme aka holdingpattern 0.6 and earlier for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in an...

PT-2015-5144

Name of the Vulnerable Software and Affected Versions Holding Pattern theme aka holding pattern version 0.6 and earlier Description The issue allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension to the admin/upload-file.php endpoint, and then accessing it...

PT-2012-1741

Name of the Vulnerable Software and Affected Versions Support Incident Tracker aka SiT! version 3.65 Description The issue allows remote authenticated users to execute arbitrary PHP code by uploading a PHP file, then accessing it via a direct request to the file in an unspecified directory. This ...

CVE-2009-1483: Undefined Security Weakness

Unrestricted file upload vulnerability in upload-file.php in Adam Patterson Studio Lounge Address Book 2.5, as reachable from index2.php, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

Studio Lounge Address Book 2.5 (profile) Shell Upload Vulnerability

No description provided by source. Address Book 2.5 profile Remote Shell Upload Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://www.studiolounge.net/2007/08/17/address-book-25 - vuln file:...