1614 matches found
CVE-2008-2475: Improper Neutralization of Special Elements used in an OS Command
eBay Enhanced Picture Uploader ActiveX control EPUWALcontrol.dll before 1.0.27 allows remote attackers to execute arbitrary commands via the PictureUrls property...
CVE-2008-6822
Unrestricted file upload vulnerability in uploadp.php in New Earth Programming Team NEPT imgupload aka Image Uploader 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension and a modified content type, then accessing this file via a direct request, ...
Sql injection
code.php in PC4Arb Pc4 Uploader 9.0 and earlier makes it easier for remote attackers to conduct SQL injection attacks via crafted keyword sequences that are removed from a filter in the id parameter in a banner action, as demonstrated via the "UNIunionON" string, which is collapsed into "UNION" b...
CVE-2009-1742
code.php in PC4Arb Pc4 Uploader 9.0 and earlier makes it easier for remote attackers to conduct SQL injection attacks via crafted keyword sequences that are removed from a filter in the id parameter in a banner action, as demonstrated via the "UNIunionON" string, which is collapsed into "UNION" b...
CVE-2009-1742
code.php in PC4Arb Pc4 Uploader 9.0 and earlier makes it easier for remote attackers to conduct SQL injection attacks via crafted keyword sequences that are removed from a filter in the id parameter in a banner action, as demonstrated via the "UNIunionON" string, which is collapsed into "UNION" b...
CVE-2009-1742
CVE-2009-1742 affects PC4Arb Pc4 Uploader 9.0 and earlier. The vulnerability is an SQL injection in code.php via the id parameter in a banner action, where a crafted keyword sequence bypasses a filter in filter_sql (e.g., UNIunionON collapses to UNION). This enables remote attackers to inject SQL...
CVE-2009-1742: Improper Neutralization of Special Elements used in an SQL Command
code.php in PC4Arb Pc4 Uploader 9.0 and earlier makes it easier for remote attackers to conduct SQL injection attacks via crafted keyword sequences that are removed from a filter in the id parameter in a banner action, as demonstrated via the "UNIunionON" string, which is collapsed into "UNION" b...
Versalsoft HTTP Image Uploader ActiveX Vulnerability
This host is installed with Versalsoft HTTP Image Uploader and is prone to ActiveX vulnerability. OpenVAS Vulnerability Test $Id: gbversalsofthttpimageupldractvxvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Versalsoft HTTP Image Uploader ActiveX Vulnerability Authors: Nikita MR Copyright: Copyright c...
Security feature bypass
Insecure method vulnerability in the Versalsoft HTTP Image Uploader ActiveX control UUploaderSvrD.dll 6.0.0.35 allows remote attackers to delete arbitrary files via the RemoveFileOrDir method...
CVE-2008-6638
The CVE-2008-6638 entry concerns the Versalsoft HTTP Image Uploader ActiveX control. The affected component is UUploaderSvrD.dll version 6.0.0.35, and the vulnerability arises from an insecure method that allows an attacker to delete arbitrary files via the RemoveFileOrDir function. This is a cli...
CVE-2008-6638
Insecure method vulnerability in the Versalsoft HTTP Image Uploader ActiveX control UUploaderSvrD.dll 6.0.0.35 allows remote attackers to delete arbitrary files via the RemoveFileOrDir method...
CVE-2008-6638: Undefined Security Weakness
Insecure method vulnerability in the Versalsoft HTTP Image Uploader ActiveX control UUploaderSvrD.dll 6.0.0.35 allows remote attackers to delete arbitrary files via the RemoveFileOrDir method...
CVE-2008-6396
Cross-site scripting XSS vulnerability in account.php in Celerondude Uploader 6.1 allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: some of these details are obtained from third party information...
Cross site scripting
Cross-site scripting XSS vulnerability in account.php in Celerondude Uploader 6.1 allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: some of these details are obtained from third party information...
CVE-2008-6396
CVE-2008-6396 is an XSS vulnerability in Celerondude Uploader 6.1, found in account.php via the username parameter. The root cause is unsanitized user input that allows injection of arbitrary web script/HTML. Impact is that an attacker could execute script in a victim’s browser. Public references...
CVE-2008-6396: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in account.php in Celerondude Uploader 6.1 allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: some of these details are obtained from third party information...
Silentum Uploader 1.4.0 Remote File Deletion Exploit
No description provided by source. Vendor: http://hypersilence.net Versions: Silentum Uploader 1.4.0 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at http://www.push55.co.uk/advisories.php?id=2 ---- Due to insufficient validation of client-side data, we...
Silentum Uploader 1.4.0 File Deletion
Vendor: http://hypersilence.net Versions: Silentum Uploader 1.4.0 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at http://www.push55.co.uk/advisories.php?id=2 ---- Due to insufficient validation of client-side data, we can alter the path of files to be...
Silentum Uploader 1.4.0 Remote File Deletion Exploit
Exploit for unknown platform in category web applications ==================================================== Silentum Uploader 1.4.0 Remote File Deletion Exploit ==================================================== Vendor: http://hypersilence.net Versions: Silentum Uploader 1.4.0 May also affec...
Silentum Uploader 1.4.0 - Remote File Deletion
Vendor: http://hypersilence.net Versions: Silentum Uploader 1.4.0 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at http://www.push55.co.uk/advisories.php?id=2 ---- Due to insufficient validation of client-side data, we can alter the path of files to be...