9 matches found
CVE-2025-13573
A security flaw has been discovered in projectworlds can pass malicious payloads up to 1.0. This vulnerability affects unknown code of the file /addbook.php. The manipulation of the argument image results in unrestricted upload. The attack can be executed remotely. The exploit has been released t...
CVE-2025-13573
A security flaw has been discovered in projectworlds can pass malicious payloads up to 1.0. This vulnerability affects unknown code of the file /addbook.php. The manipulation of the argument image results in unrestricted upload. The attack can be executed remotely. The exploit has been released t...
CVE-2025-13573: Unrestricted Upload of File with Dangerous Type
A security flaw has been discovered in projectworlds can pass malicious payloads up to 1.0. This vulnerability affects unknown code of the file /addbook.php. The manipulation of the argument image results in unrestricted upload. The attack can be executed remotely. The exploit has been released t...
CVE-2025-13573
CVE-2025-13573 concerns a vulnerability in Projectworlds’ add_book.php where manipulating the image parameter enables unrestricted file uploads. The issue is in unknown code for /add_book.php and is exploitable remotely, with public exploits available. The provided documents do not specify affect...
CVE-2025-13573 projectworlds can pass malicious payloads add_book.php unrestricted upload
A security flaw has been discovered in projectworlds can pass malicious payloads up to 1.0. This vulnerability affects unknown code of the file /addbook.php. The manipulation of the argument image results in unrestricted upload. The attack can be executed remotely. The exploit has been released t...
EUVD-2018-6580
Malware in sbrugna...
Cross site scripting
system/editbook.php in XYCMS 1.7 has stored XSS via a crafted adddo.php request, related to addbook.php...
