CVE-2008-2510

CVE-2008-2510 is a SQL injection vulnerability in the WordPress Upload File plugin, specifically in wp-uploadfile.php, where the f_id parameter enables remote attackers to execute arbitrary SQL commands. The issue is documented across multiple sources (NVD/NVD list and patch coverage) as affectin...

CVE-2008-2510: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in wp-uploadfile.php in the Upload File plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the fid parameter...

WordPress File Upload Plugin - SQL Injection

Because of this vulnerability in wp-uploadfile.php, the attackers can execute arbitrary SQL commands via the "fid" parameter. Solution Update the plugin...

WordPress Upload File插件wp-uploadfile.php SQL注入漏洞

BUGTRAQ ID: 29352 WordPress是一款免费的论坛Blog系统。 WordPress中所使用的Upload File插件中wp-uploadfile.php文件没有验证某些用户所提交的参数，远程攻击者可以向该插件提交恶意请求执行SQL注入攻击。 WordPress WordPress --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://wordpress.org/...

CVE-2004-1545

The CVE-2004-1545 vulnerability affects MoniWiki (versions 1.0.9.2 and earlier) when used with Apache mod_mime. UploadFile.php fails to properly handle files with two extensions (e.g., .php.hwp), allowing remote attackers to upload and execute arbitrary code. This is triggered by the file-extensi...

CVE-2004-1545: Undefined Security Weakness

UploadFile.php in MoniWiki 1.0.9.2 and earlier, when used with Apache modmime, does not properly handle files with two file extensions, such as .php.hwp, which allows remote attackers to upload and execute arbitrary code...

CVE-2002-1087: Undefined Security Weakness

The scripts 1 createdir.php, 2 removedir.php and 3 uploadfile.php for ezContents 1.41 and earlier do not check credentials, which allows remote attackers to create or delete directories and upload files via a direct HTTP POST request...