Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2006-3939

Disclosure Date: July 31, 2006 (last updated October 04, 2023)
ScriptsCenter ezUpload Pro 2.2.0 allows remote attackers to perform administrative activities without authentication in (1) filter.php, which permits changing the Extensions Mode file type; (2) access.php, which permits changing the Protection Method; (3) edituser.php, which permits adding upload capabilities to user accounts; (4) settings.php, which permits changing the admin information; and (5) index.php, which permits uploading of arbitrary files.
0
0
Attacker Value
Unknown

CVE-2006-2694

Disclosure Date: May 31, 2006 (last updated October 04, 2023)
Multiple PHP remote file inclusion vulnerabilities in EzUpload Pro 2.10 allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) form.php, (2) customize.php, and (3) initialize.php.
0
0
Attacker Value
Unknown

CVE-2005-4308

Disclosure Date: December 17, 2005 (last updated February 22, 2025)
index.php in ezUpload Pro 2.2 and earlier allows remote attackers to include files via the mode parameter.
0
0
Attacker Value
Unknown

CVE-2005-4309

Disclosure Date: December 17, 2005 (last updated February 22, 2025)
SQL injection vulnerability in ezUpload Pro 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified search module parameters.
0
0