Privilege escalation

Nucleus CMS v3.71 is affected by a file upload vulnerability. In this vulnerability, we can use upload to change the upload path to the path without the Htaccess file. Upload an Htaccess file and write it to AddType application / x-httpd-php.jpg. In this way, an attacker can upload a picture with...

PT-2021-5219

Name of the Vulnerable Software and Affected Versions Laravel Framework versions through 8.70.2 Description The issue is related to the insufficient blocking of executable PHP content uploads. Specifically, Illuminate/Validation/Concerns/ValidatesAttributes.php lacks a check for .phar files, whic...

Code injection

data/inc/files.php in Pluck 4.7.8 allows remote attackers to execute arbitrary code by uploading a .htaccess file that specifies SetHandler x-httpd-php for a .txt file, because only certain PHP-related filename extensions are blocked...

CVE-2019-11344

data/inc/files.php in Pluck 4.7.8 allows remote attackers to execute arbitrary code by uploading a .htaccess file that specifies SetHandler x-httpd-php for a .txt file, because only certain PHP-related filename extensions are blocked...

PT-2019-12250

Name of the Vulnerable Software and Affected Versions Pluck version 4.7.8 Description The issue allows remote attackers to execute arbitrary code by uploading a .htaccess file that specifies SetHandler x-httpd-php for a .txt file. This is possible because only certain PHP-related filename...

CVE-2019-11344: Unrestricted Upload of File with Dangerous Type

data/inc/files.php in Pluck 4.7.8 allows remote attackers to execute arbitrary code by uploading a .htaccess file that specifies SetHandler x-httpd-php for a .txt file, because only certain PHP-related filename extensions are blocked...

FCKeditor editor full version alternative upload vulnerability-vulnerability warning-the black bar safety net

FCKeditor all versian Arbitrary File Upload Vulnerability Published: 2 0 1 1 Source address:http://sourceforge. net/projects/fckeditor/ Vulnerability author: pentesters. ir Using the steps of: 1. Create a. htaccess file: Code content: FilesMatch “php.gif” SetHandler application/x-httpd-php...