CVE-2011-0701: Exposure of Sensitive Information to an Unauthorized Actor

wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read 1 draft posts or 2 private posts via a modified attachmentid parameter...

NetLink - Arbitrary File Upload

NetLink - Arbitrary File Upload ====================================== NetLink Remote Arbitrary File Upload Vulnerability Download: http://sourceforge.net/projects/kp-netlink/ by lumut-- Homepage: lumutcherenza.biz ====================================== upload.php "; echo ""; echo "Filename:...

FCKeditor 2.x <= 2.4.3 Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications ========================================================== FCKeditor 2.x = 2.4.3 Arbitrary File Upload Vulnerability ========================================================== Exploit Title: FCKeditor 2.0-2.4.3 arbitrary file upload Author:...

FCKEditor Core 2.x 2.4.3 - 'FileManager upload.php' Arbitrary File Upload

Exploit Title: FCKeditor 2.0-2.4.3 arbitrary file upload Author: grabz Software Link: http://sourceforge.net/projects/fckeditor/ Version: FCKeditor 2.x input name="NewFile" type="file...

MY-CCMS All Ver File Upload 0day-vulnerability warning-the black bar safety net

The vulnerability is located in: manage/upload.php code province ! ! 111.jpg Download 22.49 KB 4 hours ago Also you can create new“. asp”directory, there is a skip directory vulnerability, etc. EXP: the form id="frmUpload" enctype="multipart/form-data" action="http://chemlg.com/manage/upload.php"...

Developed by vehement Upload Vulnerability

Exploit for php platform in category web applications ========================================== Developed by vehement Upload Vulnerability ========================================== Author : Emre5807 Homepage : http://www.1923turk.com Dork " Developed by www.vehement.in " Developed by...

Digital College 1.0 Arbitrary Upload

======================================================================================== | Title : Digital College 1.0 upload Vulnerability | Author : indoushka | email : [email protected] | Dork : Powered by Digital College 1.0 - Magtrb Soft 2010 | Tested on: windows SP2 Français V.Pnx2 2.0 ...

CVE-2009-4818: Undefined Security Weakness

Unrestricted file upload vulnerability in upload.php in PHPSimplicity Simplicity oF Upload 1.3.2 allows remote attackers to execute arbitrary PHP code by uploading a file with a double extension, as demonstrated by .php.gif...

CVE-2009-4819: Undefined Security Weakness

Multiple unrestricted file upload vulnerabilities in upload.php in PHPhotoalbum allow remote attackers to execute arbitrary code by uploading a file with a 1 .php.pgif or 2 .php.pjpeg double extension, then accessing it via a direct request to the file in albums/userpics/...

MassMirror Uploader - Multiple Remote File Inclusions

MassMirror Uploader - Multiple Remote File Inclusions ======================================== MassMirror Uploader Multiple RFI Exploit ======================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

odlican.net CMS 1.5 - Arbitrary File Upload

odlican.net cms v.1.5 remote file upload vulnerability Author: Anonymous you can download following cms here http://cms.odlican.net/files/cmsv1-5.zip Info:odlican.net cms v.1.5 is simple opensource cms made by croatian web designers and it has serious flaw. dork:Powered by odlican.net cms v.1.5...

CVE-2010-0279: Undefined Security Weakness

Unrestricted file upload vulnerability in upload.php in BTS-GI Read excel 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory. NOTE: some of these details are obtaine...

MobPartner Counter - Arbitrary File Upload

MobPartner Counter - Arbitrary File Upload MobPartner Counter Remote File Upload Vulnerability + Author : wlhaan hacker + Email : [email protected] + Site : www.sa-hacker.com/vb + team wlhaan Hacker + Dork : "MobPartner Counter" "upload files" The exploit : http://localhost/path/upload.php edit she...

Mega Upload Upload Shell Vulnerability

No description provided by source. ======================================================================================== $ | Title : Mega Upload Upload Shell Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

Info Fisier 1.0 - Arbitrary File Upload

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ team wlhaan hacker | | // | | |...

phUploader Shell Upload

========================================================================== Script Name : phUploader Language : php email: [email protected] ============================================================ Dork : Powered By phUploader ============================================================ Exploit ...

PHPhotoalbum - Arbitrary File Upload

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ team wlhaan hacker | | // | | |...

CVE-2009-4088

Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote attackers to read arbitrary files via directory traversal sequences in the css parameter to 1 getjs.php and 2 getcsslocal.php; and include and execute arbitrary local files via the 3 group parameter to...

CVE-2009-4088

Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote attackers to read arbitrary files via directory traversal sequences in the css parameter to 1 getjs.php and 2 getcsslocal.php; and include and execute arbitrary local files via the 3 group parameter to...

CVE-2009-4088: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote attackers to read arbitrary files via directory traversal sequences in the css parameter to 1 getjs.php and 2 getcsslocal.php; and include and execute arbitrary local files via the 3 group parameter to...