clorox

2 exploits Active since Dec 2002

CVE-2007-3429 EXPLOITDB text WRITEUP

e107 <= 0.7.8 - Unauthenticated Arbitrary File Upload via Double Extension Bypass

Unrestricted file upload vulnerability in signup.php in e107 0.7.8 and earlier, when photograph upload is enabled, allows remote attackers to upload and execute arbitrary PHP code via a filename with a double extension such as .php.jpg.

View Code

CVE-2002-1814 EXPLOITDB perl WORKING POC

Bonobo - Buffer Overflow via Long Command Line Arguments

Buffer overflow in efstools in Bonobo, when installed setuid, allows local users to execute arbitrary code via long command line arguments.

View Code