CVE-2015-10138

The Work The Flow File Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jQuery- ...

A vulnerability has been disclosed in the File Upload widget, a popular jQuery framework plugin. The researchers who discovered the vulnerability claim it ...

Description: jQuery File Upload Plugin 6.4.4 contains an unrestricted file upload caused by lack of validation in ...

Description: Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0

The Work The Flow File Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jQuery- ...

Jquery File Upload Project Jquery File Upload version 9.5.0 security vulnerabilities, CVEs, exploits, vulnerability statistics, CVSS scores and references.

於JQuery File Upload Plugin 發現一個漏洞，遠端使用者可利用此漏洞，於目標系統進行遠端執行任意程式碼、資料洩露及繞過保安限制。

研究人員指出jQuery File Upload的漏洞，可讓駭客上傳一個介殼程式到伺服器上執行，也影響其他jQuery File Upload為基礎的專案。

The remote web server contains a PHP application that is affected by a file upload vulnerability allowing remote code execution.

An unauthenticated attacker could leverage this vulnerability to gain access to the host in the context of the web application user. Note: This has been ...