CVE-2023-34738

Chemex through 3.7.1 is vulnerable to arbitrary file upload...

Design/Logic Flaw

Chemex through 3.7.1 is vulnerable to arbitrary file upload...

Atlassian Jira < 8.20.20 / 9.4.x < 9.4.4 / 9.5.0 (JRASERVER-75331)

The version of Atlassian Jira Server running on the remote host is affected by a arbitrary file upload vulnerability as referenced in the JRASERVER-75331 advisory. Affected versions of Atlassian Jira Server/DC allows an unauthenticated, remoter attacker to upload arbitrary files to Jira via file...

CVE-2023-34736

Guantang Equipment Management System version 4.12 is vulnerable to Arbitrary File Upload...

CVE-2023-34736

Guantang Equipment Management System version 4.12 is vulnerable to Arbitrary File Upload...

Design/Logic Flaw

Guantang Equipment Management System version 4.12 is vulnerable to Arbitrary File Upload...

Arbitrary File Upload

feehi/feehicms is vulnerable to Arbitrary File Upload. The vulnerability exists because the library does not properly validate uploaded files, which allows an attacker to execute arbitrary code through the /admin/index.php?r=admin-user%2Fupdate-self endpoint...

PT-2023-24991 · Unknown · Guantang Equipment Management System

Name of the Vulnerable Software and Affected Versions: Guantang Equipment Management System version 4.12 Description: The Guantang Equipment Management System is affected by an issue that allows Arbitrary File Upload. This could potentially lead to unauthorized access or malicious activities...

Chemex 代码问题漏洞

Chemex is a free, open source and efficient O&M asset management platform for China celaraze individual developers. A security vulnerability exists in Chemex version 3.7.1 and earlier versions, which stems from vulnerability to arbitrary file upload attacks...

PluckCMS Arbitrary File Upload Vulnerability

PluckCMS is a content management system CMS developed using the PHP language. An arbitrary file upload vulnerability exists in PluckCMS version 4.7.10. An attacker can exploit this vulnerability to execute arbitrary code via the trashcanrestoreitem.php file...

CVE-2023-34736

The CVE-2023-34736 entry concerns Guantang Equipment Management System version 4.12 and is caused by an Arbitrary File Upload vulnerability in its upload handling. Reported consequences include potential unauthorized access or malicious activity, per the linked records. Exploitation details are n...

CVE-2023-34736

Guantang Equipment Management System version 4.12 is vulnerable to Arbitrary File Upload...

Guantang Equipment Management System 代码问题漏洞

Guantang Equipment Management System is an equipment management system from Chengdu Guantang Technology Limited Guantang, China. A security vulnerability exists in Guantang Equipment Management System version 4.12, which originates from an arbitrary file upload vulnerability...

PT-2023-24992 · Chemex · Chemex

Name of the Vulnerable Software and Affected Versions: Chemex versions 3.7.1 and earlier Description: The issue allows for arbitrary file upload. Recommendations: For versions 3.7.1 and earlier, update to a version that contains a fix for this issue...

CVE-2023-34736

Guantang Equipment Management System version 4.12 is vulnerable to Arbitrary File Upload...

CVE-2023-34738

Summary: CVE-2023-34738 affects Chemex up to version 3.7.1 and is described as vulnerable to an arbitrary file upload. The NVD metrics assign CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base score 9.8 (CRITICAL). Affected component: Chemex (web platform) with arbitrary file upload as the flaw;...

FeehiCMS Arbitrary File Upload Vulnerability (CNVD-2023-58819)

FeehiCMS is a Php-based CMS builder. FeehiCMS version 2.0.8 has an arbitrary file upload vulnerability that can be exploited by remote attackers to execute arbitrary code via the /admin/index.php?r=admin-user%2Fupdate-self component...

Arbitrary File Upload

jeecg-boot-base-core is vulnerable to Arbitrary File Upload. The vulnerability exists because the library does not properly validate uploading files, allowing an attacker to upload maliciously crafted files through the /jeecg-boot/jmreport/upload endpoint...

Arbitrary File Upload

zoujingli/thinkadmin is vulnerable to Arbitrary File Upload. The vulnerability exists because the library does not properly validate files uploaded via api/upload.php, which allows an attacker to bypass the file upload restrictions and execute malicious code on the system...

Advanced Form Builder 2.0 Arbitrary File Upload

==================================================================================================================================== | Title : Advanced Form builder v 2.0 File Upload Image Cropper Take Photo System unrestricted file upload Vulnerability | | Author : indoushka | | Tested on :...