CVE-2023-7091: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in Dreamer CMS 4.1.3. It has been declared as problematic. This vulnerability affects unknown code of the file /upload/uploadFile. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to...

CVE-2020-20672

An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file...

CVE-2020-20672: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file...

PT-2021-10529

Name of the Vulnerable Software and Affected Versions: KiteCMS version 1.1 Description: An arbitrary file upload vulnerability in the "/admin/upload/uploadfile" API endpoint of KiteCMS allows attackers to upload a crafted PHP file, potentially leading to unauthorized access. Recommendations: For...