CVE-2015-4607

Unrestricted file upload vulnerability in the Frontend User Upload feupload extension 0.5.0 and earlier for TYPO3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension using a frontend form, then accessing it via a direct request to the file in the...

Arbitrary Code Execution in extension Frontend User Upload (feupload)

It has been discovered that the extension "Frontend User Upload" feupload is susceptible to Arbitrary Code Execution Release Date: June 15, 2015 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 0.5.0 and below...

WordPress Plugin Work The Flow File Upload 2.5.2 - Arbitrary File Upload

WordPress Plugin Work The Flow File Upload 2.5.2 - Arbitrary File Upload Exploit Title : Wordpress Work the flow file upload 2.5.2 Shell Upload Vulnerability Exploit Author : Claudio Viviani Software Link : https://downloads.wordpress.org/plugin/work-the-flow-file-upload.2.5.2.zip Date : 2015-03-...

Video Community portal SQLi and XSS Vulnerable

No description provided by source. 1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Video Community portal SQLi and XSS Vulnerable Vendor...

joomla component com_manager 1.5.3 - (id) SQL Injection Vulnerability

No description provided by source. ----------------------------------------------------------------------- Joomla Component commanager 1.5.3 id SQL Injection Vulnerability ----------------------------------------------------------------------- Author : Islam DefenDers Mr.HaMaDa Site :...

Memberkit 1.0 - Remote PHP File Upload Vulnerability

No description provided by source. ================================================================= =================Memberkit 1.0 Remote File Upload================ ================================================================= Vendor: http://www.memberkit.com/ Discovered: 12-30-08 Discovere...

Joomla JE Awd Song Component Persistent XSS Vulnerability

No description provided by source. Critical Level : HIGH Vendor Url : http://joomlaextensions.co.in/component/awdsong/ Google Dork: inurl:comawdsong Price:$37.00 Author : Sid3^effects aKa HaRi shellc99atyahoo.com special thanks to : r0073r inj3ct0r.com,L0rd...

PHPCMS V9 video sharing module SQL injection vulnerability analysis-vulnerability warning-the black bar safety net

Nonsense not say,directly on behalf of the code analysis \phpcms\modules\video.php7 of 8 lines of code / Video Add method / public function add if $POST'dosubmit' //First deal submitted over the data $data'vid' = $POST'vid'; // obviously the VID is not filtered if !$ data'vid'...

CVE-2012-6037

Multiple cross-site scripting XSS vulnerabilities in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4, and other versions including 1.2, allow remote attackers to inject arbitrary web script or HTML via a CSV header with "unknown fields," which are not properly handled in error messages in the 1...

Debian DSA-2338-1 : moodle - several vulnerabilities

Several cross-site scripting and information disclosure issues have been fixed in Moodle, a course management system for online learning : - MSA-11-0020 Continue links in error messages can lead offsite - MSA-11-0024 reCAPTCHA images were being authenticated from an older server - MSA-11-0025 Gro...

InterPhoto Gallery - Multiple Vulnerabilities

InterPhoto Gallery - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 6 0day | | | | || / \ || | | | || ||// \/|/ ''' - Title : InterPhoto Gallery Multiple Remote Vulnerabilities - Affected Version : = 2.4.0 - Vendor Site :...

Joomla AWD Song Cross Site Scripting

================================================ Joomla comawdsong persistent xss Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /...

Joomla! Component JE Awd Song - Persistent Cross-Site Scripting

Joomla! Component JE Awd Song - Persistent Cross-Site Scripting Critical Level : HIGH Vendor Url : http://joomlaextensions.co.in/component/awdsong/ Google Dork: inurl:comawdsong Price:$37.00 Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...

Memberkit 1.0 Remote PHP File Upload Vulnerability

No description provided by source. ================================================================= =================Memberkit 1.0 Remote File Upload================ ================================================================= Vendor: http://www.memberkit.com/ Discovered: 12-30-08 Discovere...

Memberkit 1.0 Remote PHP File Upload Vulnerability

Exploit for unknown platform in category web applications ================================================== Memberkit 1.0 Remote PHP File Upload Vulnerability ================================================== =================================================================...

Memberkit 1.0 - Arbitrary File Upload

================================================================= =================Memberkit 1.0 Remote File Upload================ ================================================================= Vendor: http://www.memberkit.com/ Discovered: 12-30-08 Discovered By: Lo$er ====Exploit==== After...

Memberkit 1.0 Remote File Upload

================================================================= =================Memberkit 1.0 Remote File Upload================ ================================================================= Vendor: http://www.memberkit.com/ Discovered: 12-30-08 Discovered By: Lo$er Dork: "Powered by...

Ezboxx 0.7.6 Beta - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/22029/info Ezboxx is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. The vulnerabilities include an SQL-injection issue, multiple cross-site scripting issues, and a...