file upload vulnerabilities and exploits

(subscribe to this query)

Cross-site request forgery (CSRF) vulnerability in the Webform Multiple File Upload module 6.x-1.x prior to 6.x-1.3 and 7.x-1.x prior to 7.x-1.3 for Drupal allows remote malicious users to hijack the authentication of certain users for requests that delete files via unspecified v...

Webform Multiple File Upload Project Webform Multiple File Upload 6.x-1.0 Webform Multiple File Upload Project Webform Multiple File Upload 6.x-1.1 Webform Multiple File Upload Project Webform Multiple File Upload 6.x-1.2 Webform Multiple File Upload Project Webform Multiple File Upload 7.x-1.2 Webform Multiple File Upload Project Webform Multiple File Upload 7.x-1.x

The WordPress File Upload and WordPress File Upload Pro plugins for WordPress are vulnerable to Path Traversal in versions up to, and including, 4.19.1 via the vulnerable parameter wfu_newpath. This allows administrator-level malicious users to move files uploaded with the plugin...

Nickboss Wordpress File Upload Unknown Wordpress File Upload Pro Iptanus Wordpress File Upload Iptanus Wordpress File Upload Pro

File Upload Manager allows remote malicious users to upload arbitrary files by modifying the test variable to contain a value of '~~~~~~' (six tildes), which bypasses the file extension checks.

File Upload Manager File Upload Manager

Cross-site request forgery (CSRF) vulnerability in the WordPress File Upload plugin (wp-file-upload) prior to 2.4.2 for WordPress allows remote malicious users to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors. NOTE: s...

Wordpress File Upload Project Wordpress File Upload

Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0

Jquery File Upload Project Jquery File Upload

3 EDB exploits7 Github repositories

The WordPress File Upload WordPress plugin prior to 4.16.3, wordpress-file-upload-pro WordPress plugin prior to 4.16.3 allows users with a role as low as Contributor to configure the upload form in a way that allows uploading of SVG files, which could be then be used for Cross-Si...

Iptanus Wordpress File Upload Iptanus Wordpress File Upload Pro

The WordPress File Upload Free and Pro WordPress plugins prior to 4.16.3 allow users with a role as low as Contributor to perform path traversal via a shortcode argument, which can then be used to upload a PHP code disguised as an image inside the auto-loaded directory of the plu...

Iptanus Wordpress File Upload Iptanus Wordpress File Upload Pro

The WordPress File Upload WordPress plugin prior to 4.16.3, wordpress-file-upload-pro WordPress plugin prior to 4.16.3 does not escape some of its shortcode argument, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks

Iptanus Wordpress File Upload Iptanus Wordpress File Upload Pro

The WordPress File Upload and WordPress File Upload Pro plugins for WordPress are vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 4.19.1 due to insufficient input sanitization and output escaping. This makes it possible for authentic...

Iptanus Wordpress File Upload Iptanus Wordpress File Upload Pro

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Sebastian Krysmanski Upload File Type Settings plugin <= 1.1 versions.

Upload File Type Settings Plugin Project Upload File Type Settings Plugin

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook