Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
sergey korostel php upload center vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2006-1207
PHP Upload Center stores password hashes under the web root with insufficient access control, which allows remote malicious users to download each password hash via a direct request for the upload/users/[USERNAME] file.
Sergey Korostel Php Upload Center
7.5
CVSSv2
CVE-2006-1208
Sergey Korostel PHP Upload Center allows remote malicious users to execute arbitrary PHP code by uploading a file whose name ends in a .php.li extension, which can be accessed from the upload directory.
Sergey Korostel Php Upload Center
7.5
CVSSv2
CVE-2006-6360
PHP remote file inclusion vulnerability in activate.php in PHP Upload Center 2.0 allows remote malicious users to execute arbitrary PHP code via a URL in the footerpage parameter.
Sergey Korostel Php Upload Center 2.0
1 EDB exploit
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-32886
insecure direct object reference
CVE-2024-34342
file inclusion
CVE-2024-34562
CVE-2024-34347
CVE-2024-26026
CVE-2024-4647
unprivileged
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started