CVE-2023-24249

CVE-2023-24249 affects laravel-admin v1.8.19, where an unrestricted file upload vulnerability allows an attacker to upload and execute arbitrary PHP code. The connected documents include PoCs/exploits showing a web shell upload and execution, confirming practical risk. The vulnerability stems fro...

CVE-2023-24249

An arbitrary file upload vulnerability in laravel-admin v1.8.19 allows attackers to execute arbitrary code via a crafted PHP file...

PT-2023-19497 · Unknown · Laravel-Admin

Name of the Vulnerable Software and Affected Versions: laravel-admin version 1.8.19 Description: An arbitrary file upload vulnerability allows attackers to execute arbitrary code via a crafted PHP file. This issue has been exploited in real-world attacks, including a reported instance where an...

PT-2023-20785 · Unknown · Sme.Up Erp Tokyo

Name of the Vulnerable Software and Affected Versions: Sme.UP ERP TOKYO version V6R1M220406 Description: The issue is related to an arbitrary file upload vulnerability. Recommendations: For Sme.UP ERP TOKYO version V6R1M220406, at the moment, there is no information about a newer version that...

CVE-2023-26762

Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an arbitrary file upload vulnerability...

CVE-2023-26762

CVE-2023-26762 affects Sme.UP ERP TOKYO V6R1M220406 and is an arbitrary file upload vulnerability. The provided data describe an external-facing issue with a CVSS v3.1 base score of 8.8 (High) and impact on confidentiality, integrity, and availability. The root cause is an arbitrary file upload f...

CVE-2023-24249

An arbitrary file upload vulnerability in laravel-admin v1.8.19 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2023-24249

An arbitrary file upload vulnerability in laravel-admin v1.8.19 allows attackers to execute arbitrary code via a crafted PHP file...

laravel-admin 代码问题漏洞

z-song laravel-admin is an administrative interface builder for the Laravel web development framework. A security vulnerability exists in laravel-admin v1.8.19, which stems from the existence of an arbitrary file upload vulnerability that can be exploited by an attacker to execute arbitrary code...

WordPress Zendrop – Global Dropshipping Plugin <= 1.0.0 is vulnerable to Arbitrary File Upload

Software Zendrop – Global Dropshipping Type Plugin Vulnerable versions = 1.0.0 Fixed in 1.0.1 OWASP Top 10 A2: Broken Authentication Classification Arbitrary File Upload CVE CVE-2023-25970 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 180f30af21a8 Credits Dave Jong...

CVE-2023-24317

Judging Management System 1.0 was discovered to contain an arbitrary file upload vulnerability via the component editorganizer.php...

CVE-2023-24317

Judging Management System 1.0 was discovered to contain an arbitrary file upload vulnerability via the component editorganizer.php...

Privilege escalation

Judging Management System 1.0 was discovered to contain an arbitrary file upload vulnerability via the component editorganizer.php...

Wordfence Intelligence CE Weekly Vulnerability Report (Feb 13, 2023 to Feb 19, 2023)

Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence Community Edition. This database is continuously updated, maintained, and populated by Wordfences highly credentialed and experienced...

Judging Management System 代码问题漏洞

Judging Management System is a judging management system by Carlo Montero Personal Developer. A security vulnerability exists in Judging Management System version 1.0, which stems from an arbitrary file upload vulnerability...

CVE-2023-24317

Judging Management System 1.0 was discovered to contain an arbitrary file upload vulnerability via the component editorganizer.php...

PT-2023-19522 · Unknown · Judging Management System

Name of the Vulnerable Software and Affected Versions: Judging Management System version 1.0 Description: The issue is related to an arbitrary file upload vulnerability. This vulnerability is present in the component edit organizer.php. Recommendations: For Judging Management System version 1.0,...

CVE-2023-24317

Judging Management System 1.0 contains an arbitrary file upload vulnerability in the edit_organizer.php component. CVSSv3.1: 8.1 (HIGH) with Network attack vector, Low complexity, Privileges Required: LOW, User Interaction: NONE, Scope: UNCHANGED; Confidentiality and Integrity impacts HIGH, Avail...

Pharmacy Management System Arbitrary File Upload Vulnerability

Pharmacy Management System MPMS is a multi-lingual pharmacy management system developed by Mayuri K. The Pharmacy Management System v1.0 version is vulnerable to arbitrary file uploads due to a lack of validation of uploaded files in the add.php file of the component Avatar Image Handler. php fil...

Pharmacy Management System 代码问题漏洞

Pharmacy Management System MPMS is a multi-lingual pharmacy management system developed by Mayuri K. The Pharmacy Management System v1.0 version is vulnerable to arbitrary file uploads due to a lack of validation of uploaded files in the add.php file of the component Avatar Image Handler. php fil...