PunBB Automatic Image Upload 1.0 Shell Upload Vulnerability

Exploit for php platform in category web applications =========================================================== PunBB Automatic Image Upload 1.0 Shell Upload Vulnerability =========================================================== @Title: PunBB Image Upload 1.0 Shell Upload Vulnerability...

CVE-2007-6527

uploadimg.php in the Automatic Image Upload with Thumbnails imgUpload module 1.3.2 for PunBB only verifies the Content-type field of uploaded files, which allows remote attackers to upload and execute arbitrary content via a file with a 1 JPG, 2 GIF, or 3 PNG MIME type...

CVE-2007-3932

uploadimg.php in the Expose RC35 and earlier comexpose component for Joomla! sends an error message but does not exit when it detects an attempt to upload a non-JPEG file, which allows remote attackers to upload and execute arbitrary PHP code in the img/ folder...

CVE-2007-3932

CVE-2007-3932 affects the Joomla! Expose component (RC35 and earlier, com_expose) via uploadimg.php. The code fails to exit after detecting non‑JPEG uploads, enabling an unauthenticated attacker to upload and execute arbitrary PHP in the img/ folder (remote code execution). This is supported by t...

Joomla Component Expose <= RC35 Remote File Upload Vulnerability

Exploit for unknown platform in category web applications ================================================================ Joomla Component Expose $targetpath = "../../../components/comexpose/expose/img/"; ++ ++ ifstrcasecmpsubstr$userfilename,-4,'.jpg' echo "alert'The file must be jpg';";++ ++...