7 matches found
CVE-2024-7999
CVE-2024-7999 is rejected/not used; refer to CVE-2024-53981.
Zhongbang CRMEB 代码问题漏洞
Zhongbang CRMEB is an open source e-commerce management system from Zhongbang Networks Zhongbang in Xi'an, China. A security vulnerability exists in CRMEB 3.1.0+, which causes a file upload vulnerability via the CRMEB service upload service...
CVE-2020-12846: Unrestricted Upload of File with Dangerous Type
Zimbra before 8.8.15 Patch 10 and 9.x before 9.0.0 Patch 3 allows remote code execution via an avatar file. There is potential abuse of /service/upload servlet in the webmail subsystem. A user can upload executable files exe,sh,bat,jar in the Contact section of the mailbox as an avatar image for ...
OFCMS Backend File Upload Vulnerability
OFCMS is a content management system based on Java technology. A background file upload vulnerability exists in versions of OFCMS prior to 1.1.3. The vulnerability stems from the blocking of .jsp and .jspx files that fails to take into account the file.jsp::$DATA of the admin/comn/service/upload...
CVE-2019-9612: Unrestricted Upload of File with Dangerous Type
An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider for example file.jsp::$DATA to the admin/comn/service/upload URI...
File Upload Vulnerability in Panmicro E-office /webservice/upload.php
Panmicro E-office is an OA product launched by Panmicro for small and medium-sized organizations. A file upload vulnerability exists in Panmicro E-ofrvice/upload.php, which allows attackers to exploit the vulnerability to upload arbitrary files and gain control of the server...
