Exploit Database - Logo

RunCMS 1.x - Avatar Arbitrary File Upload

EDB-ID: 28896 Author: securfrog Published: 2006-11-02
CVE: N/A Type: Webapps Platform: PHP
Aliases: N/A Advisory/Source: Link Tags: Vulnerability
E-DB Verified: Verified Exploit: Download Exploit Code Download / View Raw Vulnerable App: N/A
« Previous Exploit Next Exploit » 
source: http://www.securityfocus.com/bid/20874/info

RunCMS is prone to an arbitrary file-upload vulnerability. 

An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver process.

https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/28896.php.zip

Related Exploits

Other Possible E-DB Search Terms: RunCMS 1.x,  RunCMS
Date D V Title Author
2009-10-26Download Exploit Code Verified RunCMS - 'forum' Parameter SQL InjectionNine:Situat...
2005-03-18Download Exploit Code Verified RunCMS 1.1 - Database Configuration Information DisclosureMajid NT
2005-08-22Download Exploit Code Verified RunCMS 1.1/1.2 Module Newbb_plus/Messages - SQL InjectionJames Bercegay
2006-02-09Download Exploit Code Verified RunCMS 1.2 - 'class.forumposts.php' Remote File Inclusionrgod
2006-02-14Download Exploit Code Verified RunCMS 1.2/1.3 - 'PMLite.php' SQL InjectionHamid Ebadi
2007-05-04Download Exploit Code Verified RunCMS 1.5.2 - 'debug_show.php' SQL Injectionrgod
2007-11-25Download Exploit Code Verified RunCMS 1.6 - 'disclaimer.php' Remote File OverwriteBugReport.IR
2007-12-26Download Exploit Code Verified RunCMS 1.6 - Blind SQL Injection (IDS evasion)sh2kerr
2007-12-25Download Exploit Code Verified RunCMS 1.6 - Get Admin Cookie Blind SQL Injectionsh2kerr
2007-11-24Download Exploit Code Verified RunCMS 1.6 - Local File InclusionBugReport.IR
2007-12-25Download Exploit Code Verified RunCMS 1.6 - Multiple VulnerabilitiesDSecRG
2008-02-18Download Exploit Code Verified RunCMS 1.6.1 - 'admin.php' Cross-Site ScriptingNBBN
2008-07-21Download Exploit Code Verified RunCMS 1.6.1 - 'bbPath[path]' Parameter Remote File InclusionCiph3r
2008-07-21Download Exploit Code Verified RunCMS 1.6.1 - 'bbPath[root_theme]' Parameter Remote File InclusionCiph3r
2008-05-08Download Exploit Code Verified RunCMS 1.6.1 - 'msg_image' Parameter SQL InjectionThe:Paradox
2008-05-06Download Exploit Code Waiting verification RunCMS 1.6.1 - 'pm.class.php' Multiple SQL InjectionsThe:Paradox
2009-07-13Download Exploit Code Verified RunCMS 1.6.3 - Remote Shell InjectionStAkeR
2006-03-06Download Exploit Code Verified RunCMS 1.x - 'Bigshow.php' Cross-Site ScriptingRoozbeh Afr...
2006-02-22Download Exploit Code Verified RunCMS 1.x - 'Ratefile.php' Cross-Site ScriptingRoozbeh Afr...
2010-07-07Download Exploit Code Verified RunCMS 2.1 - 'check.php' Cross-Site ScriptingAndrei Rims...
2010-07-11Download Exploit Code Verified RunCMS 2.1 - 'magpie_debug.php' Cross-Site ScriptingJohn Leitch
2011-02-10Download Exploit Code Verified RunCMS 2.2.2 - 'register.php' SQL InjectionHigh-Tech B...
2011-02-14Download Exploit Code Waiting verification RunCMS 2.2.2 - Multiple VulnerabilitiesHigh-Tech B...
2009-10-26Download Exploit Code Verified RunCMS 2m1 - 'store()' SQL Injectionbookoo
2009-10-26Download Exploit Code Verified RunCMS 2ma - 'post.php' SQL Injectionbookoo
Menu