Lucene search
+L

7 matches found

zdt
zdt
•added 2010/04/09 12:00 a.m.•24 views

PunBB Automatic Image Upload 1.0 Shell Upload Vulnerability

Exploit for php platform in category web applications =========================================================== PunBB Automatic Image Upload 1.0 Shell Upload Vulnerability =========================================================== @Title: PunBB Image Upload 1.0 Shell Upload Vulnerability...

7.1AI score
SaveExploits0
Cvelist
Cvelist
•added 2007/12/27 10:00 p.m.•40 views

CVE-2007-6527

uploadimg.php in the Automatic Image Upload with Thumbnails imgUpload module 1.3.2 for PunBB only verifies the Content-type field of uploaded files, which allows remote attackers to upload and execute arbitrary content via a file with a 1 JPG, 2 GIF, or 3 PNG MIME type...

7.3AI score0.0105EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/12/27 12:00 a.m.•7 views

CVE-2007-6527: Improper Input Validation

uploadimg.php in the Automatic Image Upload with Thumbnails imgUpload module 1.3.2 for PunBB only verifies the Content-type field of uploaded files, which allows remote attackers to upload and execute arbitrary content via a file with a 1 JPG, 2 GIF, or 3 PNG MIME type...

5.8CVSS6.2AI score0.0105EPSS
SaveExploits0References2
NVD
NVD
•added 2007/07/21 12:30 a.m.•34 views

CVE-2007-3932

uploadimg.php in the Expose RC35 and earlier comexpose component for Joomla! sends an error message but does not exit when it detects an attempt to upload a non-JPEG file, which allows remote attackers to upload and execute arbitrary PHP code in the img/ folder...

7.5CVSS7.5AI score0.06331EPSS
SaveExploits1References5
CVE
CVE
•added 2007/07/21 12:00 a.m.•92 views

CVE-2007-3932

CVE-2007-3932 affects the Joomla! Expose component (RC35 and earlier, com_expose) via uploadimg.php. The code fails to exit after detecting non‑JPEG uploads, enabling an unauthenticated attacker to upload and execute arbitrary PHP in the img/ folder (remote code execution). This is supported by t...

7.5CVSS7.5AI score0.06331EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/07/21 12:00 a.m.•6 views

CVE-2007-3932: Undefined Security Weakness

uploadimg.php in the Expose RC35 and earlier comexpose component for Joomla! sends an error message but does not exit when it detects an attempt to upload a non-JPEG file, which allows remote attackers to upload and execute arbitrary PHP code in the img/ folder...

7.5CVSS6.2AI score0.06331EPSS
SaveExploits1References1
zdt
zdt
•added 2007/07/18 12:00 a.m.•38 views

Joomla Component Expose <= RC35 Remote File Upload Vulnerability

Exploit for unknown platform in category web applications ================================================================ Joomla Component Expose $targetpath = "../../../components/comexpose/expose/img/"; ++ ++ ifstrcasecmpsubstr$userfilename,-4,'.jpg' echo "alert'The file must be jpg';";++ ++...

7.1AI score
SaveExploits0
Rows per page
Query Builder