CVE-2023-34833

An arbitrary file upload vulnerability in the component /api/upload.php of ThinkAdmin v6 allows attackers to execute arbitrary code via a crafted file...

CVE-2023-27634

Cross-Site Request Forgery CSRF vulnerability allows arbitrary file upload in Shingo Intrepidity plugin = 1.5.1 versions...

CVE-2023-27634

Cross-Site Request Forgery CSRF vulnerability allows arbitrary file upload in Shingo Intrepidity plugin = 1.5.1 versions...

CVE-2023-27634 WordPress Intrepidity Theme <= 1.5.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability allows arbitrary file upload in Shingo Intrepidity plugin = 1.5.1 versions...

CVE-2023-27634

CVE-2023-27634: CSRF in Shingo Intrepidity (Intrepidity WordPress theme)

CVE-2023-34833

An arbitrary file upload vulnerability in the component /api/upload.php of ThinkAdmin v6 allows attackers to execute arbitrary code via a crafted file...

PT-2023-21271 · Unknown · Shingo Intrepidity Plugin

Name of the Vulnerable Software and Affected Versions: Shingo Intrepidity plugin versions = 1.5.1 Description: The issue allows for Cross-Site Request Forgery CSRF which enables arbitrary file upload. Recommendations: For versions = 1.5.1, update to a version greater than 1.5.1 to resolve the iss...

CVE-2023-34833

An arbitrary file upload vulnerability in the component /api/upload.php of ThinkAdmin v6 allows attackers to execute arbitrary code via a crafted file...

PT-2023-25019 · Unknown · Thinkadmin

Name of the Vulnerable Software and Affected Versions: ThinkAdmin version 6 Description: An arbitrary file upload issue in the "api/upload.php" endpoint allows attackers to execute arbitrary code via a crafted file. Recommendations: For ThinkAdmin version 6, consider disabling the /api/upload.php...

Online Art gallery project 1.0 - Arbitrary File Upload (Unauthenticated)

Exploit Title: Online Art gallery project 1.0 - Arbitrary File Upload Unauthenticated Google Dork: n/a Date: 14/06/2023 Exploit Author: Ramil Mustafayev Vendor Homepage: https://github.com/projectworldsofficial Software Link: https://github.com/projectworlds32/Art-Gallary-php/archive/master.zip...

CVE-2023-34833

CVE-2023-34833 describes an arbitrary file upload vulnerability in ThinkAdmin v6 at the /api/upload.php endpoint, enabling attackers to run arbitrary code via a crafted file. Affected product: ThinkAdmin v6; vulnerable component: /api/upload.php. Underlying issue: arbitrary file upload without pr...

UJCMS 代码问题漏洞

UJCMS is a Java open source content management system from UJCMS Open Source. A security vulnerability exists in UJCMS version 6.0.2 that stems from allowing arbitrary file uploads...

WordPress Plugin User Submitted Posts Arbitrary File Upload Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. An arbitrary file upload vulnerability exists in the WordPress plugin User Submitted Posts, which is caused by incorrect validation of file...

CVE-2023-34944

An arbitrary file upload vulnerability in the /fileUpload.lib.php component of Chamilo 1.11. up to v1.11.18 allows attackers to execute arbitrary code via uploading a crafted SVG file...

CVE-2023-31541

A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be uploaded to the server...

PT-2023-23379 · Unknown · Ckeditor Plugin For Redmine

Name of the Vulnerable Software and Affected Versions: CKEditor plugin for Redmine version 1.2.3 Description: A vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor plugin for Redmine, allowing arbitrary files to be uploaded to the server. This issue affects the...

CVE-2023-34944

An arbitrary file upload vulnerability in the /fileUpload.lib.php component of Chamilo 1.11. up to v1.11.18 allows attackers to execute arbitrary code via uploading a crafted SVG file...

CVE-2023-34944

An arbitrary file upload vulnerability in the /fileUpload.lib.php component of Chamilo 1.11. up to v1.11.18 allows attackers to execute arbitrary code via uploading a crafted SVG file...

CVE-2023-34944

Chamilo LMS vulnerability CVE-2023-34944: Arbitrary code execution via SVG upload in /fileUpload.lib.php on Chamilo 1.11.* up to 1.11.18. Affected component and versions are confirmed; exploitation vector is a crafted SVG file uploaded to the vulnerable endpoint. Impact includes high confidential...

WordPress Download Monitor Plugin <= 4.8.3 is vulnerable to Arbitrary File Upload

Software Download Monitor Type Plugin Vulnerable versions = 4.8.3 Fixed in 4.8.4 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2023-34007 Patch priority High CVSS severity High 9.9 Developer WPChill PSID f976c6a5bcd4 Credits Nguyen Anh Tien Required privilege Subscriber...