the original cloud security

Register | Login

FilesNewsUsersAuthors

Home Files News Services About Contact Add New

Showing 1 - 25 of 735

File Upload Files

Automated Logic WebCTRL 6.5 Unrestricted File Upload Remote Code Execution

Posted Aug 23, 2017

Authored by LiquidWorm | Site zeroscience.mk

Automated Logic WebCTRL version 6.5 suffers from an unrestricted file upload vulnerability that allows for remote code execution.

tags | exploit, remote, code execution, file upload

advisories | CVE-2017-9650

MD5 | dfbd662ecb79e969664c3cfd3b845d91

Download | Favorite | Comments (0)

DeWorkshop 1.0 Arbitrary File Upload

Posted Aug 19, 2017

Authored by Ihsan Sencan

DeWorkshop version 1.0 suffers from a remote file upload vulnerability.

tags | exploit, remote, file upload

MD5 | 66f28d6e0176cbe20a9ca0bee8117754

Download | Favorite | Comments (0)

Advantech SUSIAccess 3.0 File Upload

Posted Aug 2, 2017

Authored by James Fitts

Advantech SUSIAccess versions 3.0 and below suffers from a RecoveryMgmt file upload vulnerability.

tags | exploit, file upload

advisories | CVE-2016-9349, CVE-2016-9351

MD5 | 7bdeef14532b16a57b5c3958af561cf9

Download | Favorite | Comments (0)

VehicleWorkshop Arbitrary File Upload

Posted Aug 1, 2017

Authored by Touhid M.Shaikh

VehicleWorkshop suffers from a remote file upload vulnerability.

tags | exploit, remote, file upload

MD5 | 711f39a07eb8caa7b24fb3d075b31bb8

Download | Favorite | Comments (0)

WordPress Logosware Suite Uploader 1.1.6 File Upload

Posted Jul 30, 2017

Authored by Shahab Shamsi

WordPress Logosware Suite Uploader plugin version 1.1.6 suffers from a remote file upload vulnerability.

tags | exploit, remote, file upload

MD5 | 2aa362f7e7612df23c47f6dd5f66e6e2

Download | Favorite | Comments (0)

Oracle Integration Gateway File Upload

Posted Jul 21, 2017

Authored by Roman Shalymov

Oracle Integration Gateway (PSIGW) suffers from a file upload vulnerability.

tags | advisory, file upload

advisories | CVE-2017-10061

MD5 | 05111597345e47ce58d04e720fa33522

Download | Favorite | Comments (0)

Orangescrum 1.6.1 File Upload / Cross Site Scripting

Posted Jul 17, 2017

Authored by tomplixsee

Orangescrum version 1.6.1 suffers from cross site scripting and remote file upload vulnerabilities.

tags | exploit, remote, vulnerability, xss, file upload

MD5 | 9693daf187246491e666ce159587cc45

Download | Favorite | Comments (0)

RSA Identity Governance And Lifecycle File Upload / XSS

Posted Jul 13, 2017

Site emc.com

Multiple RSA Identity Governance and Lifecycle products suffer from remote file upload and cross site scripting vulnerabilities. Affected products include RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels, RSA Via Lifecycle and Governance version 7.0, all patch levels, and RSA Identity Management and Governance (RSA IMG) versions 6.9.1, all patch levels.

tags | advisory, remote, vulnerability, xss, file upload

advisories | CVE-2017-8004, CVE-2017-8005

MD5 | e4d5560e1af72698b914df2a682e9f6b

Download | Favorite | Comments (0)

EMC Avamar File Upload / Authentication Bypass

Posted Jun 21, 2017

Site emc.com

EMC Avamar suffers from authentication bypass and remote file upload vulnerabilities.

tags | advisory, remote, vulnerability, file upload

advisories | CVE-2017-4989, CVE-2017-4990

MD5 | b4a0e80e752dee3e81b370f06160717e

Download | Favorite | Comments (0)

KBVault MySQL 0.16a Arbitrary File Upload

Posted Jun 16, 2017

Authored by Fatih Emiral

KBVault MySQL version 0.16a suffers from a remote arbitrary file upload vulnerability.

tags | exploit, remote, arbitrary, file upload

advisories | CVE-2017-9602

MD5 | beeaa30026309dadbd026daa7da8d258

Download | Favorite | Comments (0)

Invision Power Board 4.1.19.2 XSS / CSRF / File Upload / Disclosure

Posted Jun 14, 2017

Authored by Project Insecurity, CDL, dkb | Site insecurity.zone

Invision Power Board version 4.1.19.2 suffers from reflective and stored cross site scripting, cross site request forgery, information disclosure, file upload, and shell access vulnerabilities.

tags | exploit, shell, vulnerability, xss, info disclosure, file upload, csrf

MD5 | a22518e9d6c3e73504202b0d32770349

Download | Favorite | Comments (0)

Craft CMS 2.6 Cross Site Scripting / File Upload

Posted Jun 7, 2017

Authored by Ahsan Tahir

Craft CMS version 2.6 suffers from cross site scripting and remote file upload vulnerabilities.

tags | exploit, remote, vulnerability, xss, file upload

MD5 | b6aa5cdb750e8030003b4b882082459e

Download | Favorite | Comments (0)

Perch CMS 3.0.3 Cross Site Scripting / File Upload

Posted Jun 7, 2017

Authored by SaifAllah benMassaoud | Site vulnerability-lab.com

Perch CMS version 3.0.3 suffers from cross site scripting and remote file upload vulnerabilities.

tags | exploit, remote, vulnerability, xss, file upload

MD5 | 9fd148d51b3b6699cac026fb23c0013f

Download | Favorite | Comments (0)

Joomla 3.x Proof Of Concept Shell Upload

Posted May 28, 2017

Authored by Cody Sixteen

This proof of concept code shows how administrator functionality can be abused in Joomla to upload a shell.

tags | exploit, shell, proof of concept, file upload

MD5 | 5342f1f41088abee2af959b87cbce235

Download | Favorite | Comments (0)

InvoicePlane 1.4.10 File Upload / Cross Site Scripting

Posted May 23, 2017

Authored by Jasveer Singh | Site sec-consult.com

InvoicePlane version 1.4.10 suffers from cross site scripting and remote file upload vulnerabilities.

tags | exploit, remote, vulnerability, xss, file upload

MD5 | 1373e25234204c3cbef3076b84706f7d

Download | Favorite | Comments (0)

Western Digital TV Media Player 1.03.07 LFI / CSRF / File Upload

Posted May 19, 2017

Authored by Fikri Fadzil, Wan Ikram | Site sec-consult.com

Western Digital TV Media Player version 1.03.07 suffers from file upload, local file inclusion, cross site request forgery, private key issue, remote SQL injection, and other vulnerabilities.

tags | advisory, remote, local, vulnerability, sql injection, file inclusion, file upload, csrf

MD5 | 25bbe7a316a961b85fad5f438278159a

Download | Favorite | Comments (0)

Super File Explorer 1.0.1 Arbitrary File Upload

Posted May 3, 2017

Authored by Benjamin Kunz Mejri | Site vulnerability-lab.com

Super File Explorer version 1.0.1 suffers from a remote file upload vulnerability.

tags | exploit, remote, file upload

MD5 | 5f23657a5aa3b3409ab8d8f69ec13b41

Download | Favorite | Comments (0)

WordPress FancyProductDesigner 3.4.2 Stored XSS

Posted May 2, 2017

Authored by Project Insecurity, MLT | Site insecurity.zone

WordPress FancyProductDesigner plugin versions prior to 3.4.2 suffer from a persistent cross site scripting vulnerability due to improper sanitization, allowing malicious .svg file uploads.

tags | exploit, xss, file upload

MD5 | 99de5b36634bd025b50f3677207d0efa

Download | Favorite | Comments (0)

Simple File Uploader Arbitrary File Download

Posted Apr 27, 2017

Authored by Daniel Godoy

Simple File Uploader suffers from an arbitrary file download vulnerability.

tags | exploit, arbitrary, file upload

MD5 | 713425749a6e6dd4ceeeabcae05ad404

Download | Favorite | Comments (0)

Easy File Uploader Remote Shell Upload

Posted Apr 27, 2017

Authored by Daniel Godoy

Easy File Uploader suffers from a remote shell upload vulnerability.

tags | exploit, remote, shell, file upload

MD5 | 8ac3610167d2a6610763fae78f9e7f29

Download | Favorite | Comments (0)

HP Security Bulletin HPESBGN03733 1

Posted Apr 7, 2017

Authored by HP | Site hp.com

HP Security Bulletin HPESBGN03733 1 - A potential security vulnerability in Jakarta Multipart parser in Apache Struts has been addressed in HPE Universal CMDB. This vulnerability could be remotely exploited to allow code execution via mishandled file upload. Revision 1 of this advisory.

tags | advisory, code execution, file upload

advisories | CVE-2017-5638

MD5 | 77f2af54b71a701cb9a39d3cbac64dbd

Download | Favorite | Comments (0)

Solar-Log CSRF / Information Disclosure / DoS / File Upload

Posted Mar 22, 2017

Authored by T. Weber | Site sec-consult.com

Solare Datensysteme GmbH Solar-Log versions 250, 300, 500, 800e, 1000, 1000 PM+, 1200, and 2000 suffer from cross site request forgery, cross site scripting, file upload, information disclosure, and denial of service vulnerabilities.

tags | exploit, denial of service, vulnerability, xss, info disclosure, file upload, csrf

MD5 | 3d7da7086a3bee04a402cfd29ba39c1c

Download | Favorite | Comments (0)

b2evolution 6.8.8 Shell Upload

Posted Mar 14, 2017

Authored by yokoacc, rungga_reksya, dvnrcy

b2evolution version 6.8.8 Stable suffers from a remote shell upload vulnerability.

tags | exploit, remote, shell, file upload

MD5 | ed29437b5e18c77941e9ba2458dfd0a1

Download | Favorite | Comments (0)

Western Digital My Cloud Command Injection / File Upload

Posted Mar 7, 2017

Authored by Fikri Fadzil, Wan Ikram | Site sec-consult.com

Western Digital My Cloud suffers from unauthenticated OS command injection and arbitrary file upload vulnerabilities.

tags | exploit, arbitrary, vulnerability, file upload

MD5 | fdfa59e97bfdecc95a90b40118e82469

Download | Favorite | Comments (0)

iBaseCMS 1.23 SQL Injection / File Upload

Posted Mar 7, 2017

Authored by Bilal Kardadou

iBaseCMS version 1.23 suffers from file upload, remote code execution, and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, code execution, sql injection, file upload

MD5 | d28a116f850f248cd5287cebbaa7d349

Download | Favorite | Comments (0)