14803 matches found
CVE-2020-36706 Simple:Press – WordPress Forum Plugin <= 6.6.0 - Arbitrary File Upload
The Simple:Press – WordPress Forum Plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the /admin/resources/jscript/ajaxupload/sf-uploader.php file in versions up to, and including, 6.6.0. This makes it possible for attackers to upload arbitrary fil...
PT-2023-11848 · WordPress · Simple:Press
Name of the Vulnerable Software and Affected Versions: The Simple:Press – WordPress Forum Plugin for WordPress versions up to, and including, 6.6.0 Description: The issue is related to arbitrary file uploads due to missing file type validation in the...
CVE-2023-46004
Sourcecodester Best Courier Management System 1.0 is vulnerable to Arbitrary file upload in the updateuser function...
CVE-2023-46004
Sourcecodester Best Courier Management System 1.0 is vulnerable to Arbitrary file upload in the updateuser function...
CVE-2023-46004
Sourcecodester Best Courier Management System 1.0 is vulnerable to Arbitrary file upload in the updateuser function...
Design/Logic Flaw
Sourcecodester Best Courier Management System 1.0 is vulnerable to Arbitrary file upload in the updateuser function...
CVE-2023-46004
The collected documents confirm a vulnerability in Sourcecodester Best Courier Management System 1.0: an Arbitrary file upload flaw in the update_user function. This indicates a problematic upload handling path that can be abused to upload arbitrary files. No detailed exploit steps, affected file...
PT-2023-29788 · Sourcecodester · Sourcecodester Best Courier Management System
Name of the Vulnerable Software and Affected Versions: Sourcecodester Best Courier Management System version 1.0 Description: The issue concerns an arbitrary file upload vulnerability in the update user function. This allows for potential malicious file uploads. No information is provided about t...
Best Courier Management System Code Issue Vulnerability
Best Courier Management System is a courier management system by Mayuri K., a personal developer. A security vulnerability exists in Best Courier Management System version 1.0, which was discovered to contain an arbitrary file upload vulnerability via the updateuser function...
CVE-2023-46004
Sourcecodester Best Courier Management System 1.0 is vulnerable to Arbitrary file upload in the updateuser function...
CVE-2023-46004
Sourcecodester Best Courier Management System 1.0 is vulnerable to Arbitrary file upload in the updateuser function...
CVE-2023-45952
An arbitrary file upload vulnerability in the component ajaxlink.php of lylmespage v1.7.0 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2023-45952
An arbitrary file upload vulnerability in the component ajaxlink.php of lylmespage v1.7.0 allows attackers to execute arbitrary code via uploading a crafted file...
PT-2023-29771 · Unknown · Lylme Spage
Name of the Vulnerable Software and Affected Versions: lylme spage version 1.7.0 Description: An arbitrary file upload vulnerability in the component ajax link.php of lylme spage allows attackers to execute arbitrary code via uploading a crafted file. Recommendations: For lylme spage version 1.7....
CVE-2023-45952
An arbitrary file upload vulnerability in the component ajaxlink.php of lylmespage v1.7.0 allows attackers to execute arbitrary code via uploading a crafted file...
WordPress Themify Ultra Theme <= 7.3.5 is vulnerable to Arbitrary File Upload
Software Themify Ultra Type Theme Vulnerable versions = 7.3.5 Fixed in 7.3.6 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2023-46149 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 04def42b7ff1 Credits Rafie Muhammad Patchstack Required privile...
IBM Security Verify Privilege Manager 代码问题漏洞
IBM Security Verify Privilege Manager is a security management software from International Business Machines IBM for endpoint privilege management and application control in corporate environments. The software stops unintentional downloads of malware and ransomware from attacking applications by...
PaperCut MF < 20.1.9 / 21.x < 21.2.13 / 22.x < 22.1.3 Multiple Vulnerabilities
The version of PaperCut MF installed on the remote Windows host is affected by multiple vulnerabilities, as follows: - An authentication bypass exists that could allow a remote, unauthenticated attacker to upload arbitrary files to the PaperCut hostâs file storage. This could exhaust system...
CVE-2023-4861
The File Manager Pro WordPress plugin before 1.8.1 allows admin users to upload arbitrary files, even in environments where such a user should not be able to gain full control of the server, such as a multisite installation. This leads to remote code execution...