CVE-2019-10276: Unrestricted Upload of File with Dangerous Type

Western Bridge Cobub Razor 0.8.0 has a file upload vulnerability via the web/assets/swf/uploadify.php URI, as demonstrated by a .php file with the image/jpeg content type...

CVE-2018-19421

In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but Internet Explorer render HTML elements in a .eml file, because of admin/upload-uploadify.php, and validatesafefile in admin/inc/securityfunctions.php...

Design/Logic Flaw

In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but Internet Explorer render HTML elements in a .eml file, because of admin/upload-uploadify.php, and validatesafefile in admin/inc/securityfunctions.php...

CVE-2018-19421

In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but Internet Explorer render HTML elements in a .eml file, because of admin/upload-uploadify.php, and validatesafefile in admin/inc/securityfunctions.php...

PT-2018-14955

Name of the Vulnerable Software and Affected Versions GetSimpleCMS version 3.3.15 Description The issue concerns the upload functionality in GetSimpleCMS, where the admin/upload.php blocks uploads of .html files, but Internet Explorer can still render HTML elements in a .eml file. This is due to...

CVE-2018-19421: Unrestricted Upload of File with Dangerous Type

In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but Internet Explorer render HTML elements in a .eml file, because of admin/upload-uploadify.php, and validatesafefile in admin/inc/securityfunctions.php...

PT-2018-14954

Name of the Vulnerable Software and Affected Versions GetSimpleCMS version 3.3.15 Description The issue allows HTML execution through alternative file uploads. This can occur with files having no extension or unrecognized extensions, such as 'test' or 'test.asdf', due to vulnerabilities in...

WordPress PHP Event Calendar Plugin <= 1.5 - Arbitrary File Upload

This plugin is prone to an arbitrary file upload vulnerability via "uploadify.php" file. Solution Update the plugin...

sitestar v2.7 /uploadify.php 文件上传漏洞

No description provided by source...

WordPress plugin Foxypress uploadify.php Arbitrary Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

ClanSuite 2.9 - Arbitrary File Upload Vulnerability

No description provided by source. Exploit Title: ClanSuite 2.9 Arbitrary File Upload Date: 29/05/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://clansuite.com/ Software Link : https://github.com/jakoch/Clansuite or : http://svn.gna.org/svn/clansuite/trunk/ Version: 2.9 and Trunk...

Wordpress Theme Photocrati-theme-v4.07 Shell Upload Vulnerability

Exploit for php platform in category web applications Title : Wordpress Theme Photocrati-theme-v4.07 Shell Upload Vulnerability Author : Aloulou Date : 13/05/2014 Facebook : http://www.facebook.com/Aloulou.TN Email: email protected Vendor : www.photocrati.com Google Dork...

MODx Evogallery模块'uploadify.php'任意文件上传漏洞

Bugtraq ID:65646 MODx是一个开源的PHP应用框架,可以帮助使用者控制自己的网上内容。 MODx Evogallery模块'uploadify.php'不正确过滤用户提交的输入，允许远程攻击者利用漏洞提交恶意文件，并以WEB权限执行。 0 MODx Evogallery 用户可参考厂商的GIT库以获得补丁修复此漏洞： https://github.com/Mark-H/EvoGallery ?php $uploadfile="file.php"; $ch =...

WordPress Kidoo Shell Upload

"@$uploadfile"; curlsetopt$ch, CURLOPTRETURNTRANSFER, 1; $postResult = curlexec$ch; curlclose$ch; print "$postResult"; ?...

MetInfo 5.1.3 /admin/include/uploadify.php 文件上传漏洞

No description provided by source...

Wordpress theme sandbox Arbitrary File Upload Vulnerability (msf)

Exploit for php platform in category remote exploits -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= /' \ /'\ /\ \ /'\ /, \ /\/\ \ \ \ \ ,/\ /\ \ //\ \ /' \ /\ //\ Exploit database separated by exploit // type local, remote, DoS, etc. + Site : 1337day.com + Support...

Wordpress theme sandbox Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

WordPress WP-Property PHP file upload vulnerability-vulnerability warning-the black bar safety net

WordPress WP-Property PHP file upload vulnerability This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Wordpress Themes moneymasters File Upload Vulnerability (metasploit)

Exploit for php platform in category web applications -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= /' \ /'\ /\ \ /'\ /, \ /\/\ \ \ \ \ ,/\ /\ \ //\ \ /' \ /\ //\ Exploit database separated by exploit // type local, remote, DoS, etc. + Site : 1337day.com + Support...

Uploadify jQuery Generic File Upload

No description provided by source. Title : Uploadify jQuery Generic File Upload Metasploit Author : KedAns-Dz E-mail : ked-h @hotmail.com / @1337day.com Home : Hassi.Messaoud 30500 - Algeria -00213555248701 Web Site : www.1337day.com .net .org FaCeb0ok : http://fb.me/Inj3ct0rK3d Friendly Sites :...