WordPress WP-Property PHP File Upload Vulnerability

This module exploits a vulnerability found in WP-Property use exploit/unix/webapp/wp/propertyuploadexec msf undefinedpropertyuploadexec show actions ...actions... msf undefinedpropertyuploadexec set ACTION msf undefinedpropertyuploadexec show options ...show and set options... msf...

PolarBear CMS PHP File Upload Vulnerability

This module exploits a file upload vulnerability found in PolarBear CMS By abusing the upload.php file, a malicious user can upload a file to a temp directory without authentication, which results in arbitrary code execution. Module Options msf use exploit/multi/http/polarcms/uploadexec msf...

appRain CMF Arbitrary PHP File Upload Vulnerability

This module exploits a vulnerability found in appRain's Content Management Framework CMF, version 0.1.5 or less. By abusing the uploadify.php file, a malicious user can upload a file to the uploads/ directory without any authentication, which results in arbitrary code execution. Module Options ms...

CVE-2011-3841

The CVE-2011-3841 entry concerns the WordPress WP Symposium plugin vulnerability: a Cross-Site Scripting (XSS) flaw in the file uploadify/get_profile_avatar.php that allows arbitrary script/HTML injection via the uid parameter. Affected versions are before 11.12.08. Root cause: input handling in ...

WordPress Symposium Plugin <= 11.12.07 - XSS

Because of this vulnerability in uploadify/getprofileavatar.php, the attackers can inject arbitrary web script or HTML via the "uid" parameter. Solution Update the plugin...

WordPress Uploadify Plugin 1.0 Remote File Upload

GotGeek Labs http://www.gotgeek.com.br/ WordPress Uploadify Plugin 1.0 Remote File Upload + Description Adds a shortcode to embed the necessary elements to use Uploadify in a page or post which will give your website visitors the ability to upload large files. By default the files will be uploade...

WordPress Uploadify 1.0 Shell Upload

GotGeek Labs http://www.gotgeek.com.br/ WordPress Uploadify Plugin 1.0 Remote File Upload + Description Adds a shortcode to embed the necessary elements to use Uploadify in a page or post which will give your website visitors the ability to upload large files. By default the files will be uploade...

VulnCheck KEV: CVE-2011-10041

Uploadify WordPress plugin versions up to and including 1.0 contain an arbitrary file upload vulnerability in processupload.php due to missing file type validation. An unauthenticated remote attacker can upload arbitrary files to the affected WordPress site, which may allow remote code execution...

Uploadify 1.0 - Unauthenticated Arbitrary File Upload

This vulnerability has been seen exploited in the wild...

WordPress Uploader 1.0.0 Shell Upload

------------------------------------------------------------------------ Software................WordPress Uploader 1.0.0 Vulnerability...........Arbitrary Upload Download................http://wordpress.org/extend/plugins/uploader/ Release Date............1/24/2011 Tested On...............Window...

WordPress Database Interface Toolkit 0.1.7 Shell Upload

------------------------------------------------------------------------ Software................WordPress Database Interface Toolkit 0.1.7 Vulnerability...........Arbitrary Upload Download................http://dbtoolkit.digilab.co.za/ Release Date............11/5/2010 Tested...

Uploadify Sample Collection Shell Upload

======================================================================================== | Title : Uploadify Sample Collection Shell Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com | Tested on: windows SP2 Français V.Pnx2 2.0 + Lunix Français v.9.4...

Uploadify Sample Collection Shell Upload Vulnerability

Exploit for unknown platform in category web applications ====================================================== Uploadify Sample Collection Shell Upload Vulnerability ======================================================...

Uploadify Sample Collection - Arbitrary File Upload

======================================================================================== | Title : Uploadify Sample Collection Shell Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com | Tested on: windows SP2 Français V.Pnx2 2.0 + Lunix Français v.9.4...

jQuery uploadify v2.1.0 Remote File Upload

No description provided by source. Exploit Title: jQuery uploadify v2.1.0 Remote File Upload Date: 21/01/2010 Author: k4cp3r/Ablus Version: v2.1.0 uploadify.swf Actionscript: function setAllowedTypes:void allowedTypes = ; if param.fileDesc && param.fileExt var fileDescs:Array =...

jQuery uploadify v2.1.0 Remote File Upload

Exploit for unknown platform in category web applications ========================================== jQuery uploadify v2.1.0 Remote File Upload ========================================== Exploit Title: jQuery uploadify v2.1.0 Remote File Upload Date: 21/01/2010 Author: k4cp3r/Ablus Version: v2.1....

jQuery Uploadify 2.1.0 - Arbitrary File Upload

Exploit Title: jQuery uploadify v2.1.0 Remote File Upload Date: 21/01/2010 Author: k4cp3r/Ablus Version: v2.1.0 uploadify.swf Actionscript: function setAllowedTypes:void allowedTypes = ; if param.fileDesc && param.fileExt var fileDescs:Array = param.fileDesc.split'|'; var fileExts:Array =...