CVE-2022-46102

AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fstdown.inc.php...

PSA: YITH WooCommerce Gift Cards Premium Plugin Exploited in the Wild

The Wordfence Threat Intelligence team has been tracking exploits targeting a Critical Severity Arbitrary File Upload vulnerability in YITH WooCommerce Gift Cards Premium, a plugin with over 50,000 installations according to the vendor. The vulnerability, reported by security researcher Dave Jong...

CVE-2022-45966

here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5...

CVE-2022-45966

here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5...

Design/Logic Flaw

here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5...

CVE-2022-46493

Default version of nbnbk was discovered to contain an arbitrary file upload vulnerability via the component /api/User/downloadimg...

nbnbk 代码问题漏洞

nbnbk is based on thinkphp5 cms management system , B2C e-commerce open source php mall system platform , tp5 open source cms , thinkphp enterprise website source code for blogs , small and medium-sized enterprises to build a station secondary development . nbnbk There is a security vulnerability...

CVE-2022-46102

AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fstdown.inc.php...

PT-2022-27739 · Ayacms · Ayacms

Name of the Vulnerable Software and Affected Versions: AyaCMS version 3.1.2 Description: The issue concerns an arbitrary file upload vulnerability. It can be exploited via the /aya/module/admin/fst down.inc.php endpoint. Recommendations: For AyaCMS version 3.1.2, consider restricting access to th...

PT-2022-27702 · Classcms · Classcms

Name of the Vulnerable Software and Affected Versions: Classcms version 3.5 Description: The issue is related to an arbitrary file upload vulnerability in the file management function module. Recommendations: For Classcms version 3.5, consider restricting access to the file management function...

ClassCMS 代码问题漏洞

ClassCMS is a simple, flexible, secure and easy-to-expand content management system in China. A security vulnerability exists in ClassCMS version 3.5, which originates from an arbitrary file upload in the file management functional module...

CVE-2022-45966

here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5...

CVE-2022-45966

CVE-2022-45966 affects ClassCMS 3.5, describing an arbitrary file upload vulnerability in the file management function/module. The issue is rooted in the file upload handling (improper validation/verification) and is rated CVSSv3.1 9.8 (Network, High privileges not required, no user interaction) ...

CVE-2022-46102

AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fstdown.inc.php...

CVE-2022-46102

AyaCMS 3.1.2 is vulnerable to arbitrary file upload via /aya/module/admin/fst_down.inc.php. The provided documents identify the vulnerable endpoint but do not disclose the exact root cause, affected components beyond the path, or concrete remediation details. The CVSS metrics in the primary entry...

CVE-2022-45966

here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5...

AyaCMS 代码问题漏洞

AyaCMS is an extremely simple and free open source PHP website builder. A security vulnerability exists in AyaCMS version v3.1.2, which originates from uploading arbitrary files via /aya/module/admin/fstdown.inc.php...

CVE-2022-4061

The JobBoardWP WordPress plugin before 1.2.2 does not properly validate file names and types in its file upload functionalities, allowing unauthenticated users to upload arbitrary files such as PHP...

CVE-2022-4061 JobBoardWP < 1.2.2 - Unauthenticated Arbitrary File Upload

The JobBoardWP WordPress plugin before 1.2.2 does not properly validate file names and types in its file upload functionalities, allowing unauthenticated users to upload arbitrary files such as PHP...

CVE-2022-32573

A directory traversal vulnerability exists in the AssetActions.aspx addDoc functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary file upload. An attacker can send an HTTP request to trigger this vulnerability...