14758 matches found
WordPress plugin 3D FlipBook, PDF Viewer, PDF Embedder 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin 3D FlipBoo...
WordPress Real 3D FlipBook plugin <= 4.8 - Authenticated (Author+) Arbitrary File Upload vulnerability
Authenticated Author+ Arbitrary File Upload vulnerability discovered by Aitor F kr0no in WordPress Plugin Real 3D FlipBook versions = 4.6...
CVE-2024-44758
An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to execute arbitrary code via uploading crafted files...
CVE-2024-44758
An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to execute arbitrary code via uploading crafted files...
CVE-2024-50649
The user avatar upload function in pythonbook V1.0 has an arbitrary file upload vulnerability...
CVE-2024-50648
yshopmall V1.0 has an arbitrary file upload vulnerability, which can enable RCE or even take over the server when improperly configured to parse JSP files...
PT-2024-31237 · Unknown · Nus-M9 Erp Management
Name of the Vulnerable Software and Affected Versions: NUS-M9 ERP Management Software version 3.0.0 Description: An arbitrary file upload issue in the /Production/UploadFile component allows attackers to execute arbitrary code by uploading crafted files. Recommendations: For NUS-M9 ERP Management...
CVE-2024-44758
CVE-2024-44758 describes an arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 . Multiple sources (NVD, Red Hat, CVE databases) identify that uploading crafted files can lead to arbitrary code execution. The CVSS v3.1 vector indica...
WordPress 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin Plugin <= 4.6 is vulnerable to Arbitrary File Upload
Software 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin Type Plugin Vulnerable versions = 4.6 Fixed in 4.8.5 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2024-9849 Patch priority Medium CVSS severity Medium 9.1 Developer Claim ownership PSID...
NUS-M9 安全漏洞
NUS-M9 is an ERP system from China Zhelin NUS Company. A security vulnerability exists in NUS-M9 v3.0.0, which is caused by an arbitrary file upload vulnerability in the /Production/UploadFile component. An attacker can exploit this vulnerability to execute arbitrary code by uploading a specially...
WordPress WP Time Capsule Arbitrary File Upload to RCE
This module exploits an arbitrary file upload vulnerability in the WordPress WP Time Capsule plugin versions use exploit/multi/http/wp/timecapsulefileuploadrce msf undefinedtimecapsulefileuploadrce show actions ...actions... msf undefinedtimecapsulefileuploadrce set ACTION msf...
CVE-2024-50649
The user avatar upload function in pythonbook V1.0 has an arbitrary file upload vulnerability...
PT-2024-34376 · Unknown · Python Book
Name of the Vulnerable Software and Affected Versions: python book version V1.0 Description: The issue concerns an arbitrary file upload vulnerability in the user avatar upload function. This vulnerability allows for the upload of arbitrary files, which could potentially lead to security issues...
yshopmall 安全漏洞
yshopmall is a mall system by guchengwuyue individual developer. A security vulnerability exists in version V1.0 of yshopmall. An attacker can upload arbitrary files by exploiting the vulnerability...
python_book 安全漏洞
pythonbook is an online book lending website, book management system by Tim Green, an individual developer. A security vulnerability exists in pythonbook V1.0, which is caused by an arbitrary file upload vulnerability in the user avatar upload function...
CVE-2024-50648
yshopmall V1.0 has an arbitrary file upload vulnerability, which can enable RCE or even take over the server when improperly configured to parse JSP files...
CVE-2024-44758
An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to execute arbitrary code via uploading crafted files...
java_shop 安全漏洞
javashop is a Java-based mall website system designed and implemented by Tim Green, an individual developer. A security vulnerability exists in javashop version 1.0. An attacker can exploit the vulnerability to upload arbitrary files by modifying the avatar function...
CVE-2024-50649
The CVE-2024-50649 entry describes an arbitrary file upload vulnerability in the user avatar upload function of python_book V1.0. Affected component: user avatar upload handler in python_book. Root cause: arbitrary file upload capability enabling potentially unsafe files to be uploaded. Impact: a...