14767 matches found
CVE-2024-44871
An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows attackers to execute arbitrary code via uploading a crafted file...
moziloCMS 安全漏洞
moziloCMS is a content management system CMS in the moziloCMS open source. A security vulnerability exists in moziloCMS version v3.0, which stems from an arbitrary file upload vulnerability in component /admin/index.php that allows an attacker to execute arbitrary code by uploading a crafted file...
CVE-2024-44849
Qualitor up to 8.24 is vulnerable to Remote Code Execution RCE via Arbitrary File Upload in checkAcesso.php...
Gutenberg Forms Plugin for WordPress <= 2.2.9 Arbitrary File Upload
The WordPress Gutenberg Forms Plugin installed on the remote host is affected by an unauthenticated arbitrary file upload vulnerability. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...
CVE-2024-44849
Qualitor up to 8.24 is vulnerable to Remote Code Execution RCE via Arbitrary File Upload in checkAcesso.php...
CVE-2024-44849
Qualitor # Answer with one JSON object as required. The insight is in Markdown format and concise. If you need a shorter version, I can provide it. However, ensure it adheres to the given structure. Nonetheless, this retains all supported factual details from the documents. If you'd like me to ta...
Qualitor 安全漏洞
Qualitor is a managed service process and centralized service platform from Qualitor, Inc. A security vulnerability exists in Qualitor version 8.24 and earlier, which stems from vulnerability to a Remote Code Execution RCE attack that can be exploited by an attacker via an arbitrary file upload i...
CVE-2024-44849
Qualitor up to 8.24 is vulnerable to Remote Code Execution RCE via Arbitrary File Upload in checkAcesso.php...
WordPress Customizer Export/Import Plugin <= 0.9.7 is vulnerable to Arbitrary File Upload
Software Customizer Export/Import Type Plugin Vulnerable versions = 0.9.7 Fixed in 0.9.7.1 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2024-7620 Patch priority Low CVSS severity Low 6.6 Developer Claim ownership PSID 9417048c628d Credits Luk6785 Required privilege...
CVE-2024-7620 Customizer Export/Import <= 0.9.7 - Authenticated (Admin+) Arbitrary File Upload via Customization Settings Import
The Customizer Export/Import plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'import' function in all versions up to, and including, 0.9.7. This makes it possible for authenticated attackers, with Administrator-level access and above, to...
CVE-2024-7620
The CVE-2024-7620 entry concerns the WordPress plugin Customizer Export/Import (
CVE-2024-7620 Customizer Export/Import <= 0.9.7 - Authenticated (Admin+) Arbitrary File Upload via Customization Settings Import
The Customizer Export/Import plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'import' function in all versions up to, and including, 0.9.7. This makes it possible for authenticated attackers, with Administrator-level access and above, to...
WordPress plugin Customizer Export/Import 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...
Veeam Service Provider Console 安全漏洞
Veeam Service Provider Console is a cloud-enabled platform from Veeam USA. A security vulnerability exists in Veeam Service Provider Console version 8.0.0.19552 and previous versions 8, which stems from the inclusion of a code injection vulnerability that allows a low privileged user with REST AP...
Crime Complaints Reporting Management System 1.0 Arbitrary File Upload
============================================================================================================================================= | Title : Crime Complaints Reporting Management System 1.0 arbitrary file upload Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro /...
PT-2024-39046 · WordPress · Sirv
Name of the Vulnerable Software and Affected Versions: The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress versions up to, and including, 7.2.7 Description: The issue is related to unauthorized modification of data due to a missing capability check on the sirv save prevented sizes...
CVE-2024-45171
CVE-2024-45171 affects za-internet C-MOR Video Surveillance 5.2401. Affected component: web upload for backups; root cause is improper input validation allowing authenticated low-privilege users to upload arbitrary files when the filename contains .cbkf, enabling storage of webshell.cbkf.php unde...
CVE-2024-45171
An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper user input validation, it is possible to upload dangerous files, for instance PHP code, to the C-MOR system. By analyzing the C-MOR web interface, it was found out that the upload functionality for backup file...
CVE-2024-45171
An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper user input validation, it is possible to upload dangerous files, for instance PHP code, to the C-MOR system. By analyzing the C-MOR web interface, it was found out that the upload functionality for backup file...