535 matches found
CVE-2022-47928
Summary: CVE-2022-47928 is a cross-site scripting (XSS) vulnerability in MISP prior to 2.4.167, caused by an XSS flaw in the template file uploads feature (app/View/Templates/upload_file.ctp). The issue is documented across multiple sources (NVD, Red Hat, OSV, etc.) and is specifically tied to th...
CVE-2022-46020
WBCE CMS v1.5.4 can implement getshell by modifying the upload file type...
Design/Logic Flaw
WBCE CMS v1.5.4 can implement getshell by modifying the upload file type...
PT-2022-27718 · Wbce Cms · Wbce Cms
Name of the Vulnerable Software and Affected Versions: WBCE CMS version 1.5.4 Description: The issue allows for getshell by modifying the upload file type, potentially leading to unauthorized access and control. Recommendations: For WBCE CMS version 1.5.4, consider restricting the upload file typ...
WBCE CMS 代码问题漏洞
WBCE CMS is an open source content management system CMS based on PHP and MySQL. A security vulnerability exists in WBCE CMS v1.5.4, which originates from a getshell that can be realized by modifying the upload file type...
CVE-2022-46020
WBCE CMS v1.5.4 is affected by CVE-2022-46020, a remote code execution vulnerability caused by allowing getshell via modification of the upload file type. The NVD/Nuclei and related sources describe a critical flaw (CVSS v3.1: 9.8) with network attack vector, no privileges required, and high impa...
Casdoor 路径遍历漏洞
Casdoor is an open source Identity and Access Management IAM / Single Sign-On SSO platform with a Web UI that supports OAuth 2.0 / OIDC and SAML authentication. A security vulnerability exists in Casdoor versions prior to v1.126.1, which stems from its uploadFile function that allows an attacker ...
Zimbra Collaboration Suite 代码问题漏洞
Zimbra Collaboration Suite ZCS is an open source collaboration suite from Synacor, USA. The product includes WebMail, Calendar, Address Book and more. A code issue vulnerability exists in Zimbra Collaboration Suite versions 8.8.15 and 9.0, which originates from an authenticated administrator user...
CVE-2022-40048
Flatpress v1.2.1 was discovered to contain a remote code execution RCE vulnerability in the Upload File function...
Remote code execution
Flatpress v1.2.1 was discovered to contain a remote code execution RCE vulnerability in the Upload File function...
CVE-2022-40048
Flatpress v1.2.1 was discovered to contain a remote code execution RCE vulnerability in the Upload File function...
CVE-2022-40048
Flatpress v1.2.1 was discovered to contain a remote code execution RCE vulnerability in the Upload File function...
CVE-2022-40048
CVE-2022-40048 concerns Flatpress v1.2.1, with a remote code execution (RCE) vulnerability in the Upload File function. Multiple sources (NVD, Red Hat, NVD feed, OpenVAS) confirm an RCE impacting Flatpress in Version 1.2.1, via the file upload mechanism, yielding high impact on confidentiality, i...
CVE-2022-40048
Flatpress v1.2.1 was discovered to contain a remote code execution RCE vulnerability in the Upload File function...
PT-2022-25176 · Flatpress · Flatpress
Name of the Vulnerable Software and Affected Versions: Flatpress version 1.2.1 Description: A remote code execution issue was found in the Upload File function, allowing for potential code execution. Recommendations: For version 1.2.1, consider disabling the Upload File function until a patch is...
CVE-2022-40048: Unrestricted Upload of File with Dangerous Type
Flatpress v1.2.1 was discovered to contain a remote code execution RCE vulnerability in the Upload File function...
CVE-2022-20146
In uploadFile of FileUploadServiceImpl.java, there is a possible incorrect file access due to a confused deputy. This could lead to local information disclosure of private files with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...
FUDForum Remote Code Execution Vulnerability
FUDForum is a PHP-based open source forum software.FUDForum versions prior to 3.1.2 are vulnerable to remote code execution. An attacker can use this vulnerability to execute remote code with the help of the upload file function of the file management system in the administration control panel...