CVE-2022-40721

Arbitrary file upload vulnerability in php uploader...

CVE-2022-40721

Arbitrary file upload vulnerability in php uploader...

Design/Logic Flaw

Arbitrary file upload vulnerability in php uploader...

CVE-2022-40721

Arbitrary file upload vulnerability in php uploader...

CVE-2022-40721

The CVE-2022-40721 entry corresponds to an Arbitrary file upload vulnerability in CreativeDream php uploader. Multiple connected sources confirm that the issue stems from insufficient validation of uploaded files, enabling remote code execution via uploaded content. The NVD entry assigns a CVSS v...

CVE-2022-3125

The Frontend File Manager Plugin WordPress plugin before 21.3 allows any authenticated users, such as subscriber, to rename a file to an arbitrary extension, like PHP, which could allow them to basically be able to upload arbitrary files on the server and achieve RCE...

CVE-2022-3125 Frontend File Manager < 21.3 - Subscriber+ Arbitrary File Upload

The Frontend File Manager Plugin WordPress plugin before 21.3 allows any authenticated users, such as subscriber, to rename a file to an arbitrary extension, like PHP, which could allow them to basically be able to upload arbitrary files on the server and achieve RCE...

PT-2022-25494 · Unknown · Phpuploader

Name of the Vulnerable Software and Affected Versions: php uploader affected versions not specified Description: The issue is related to an arbitrary file upload vulnerability. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2022-40341

mojoPortal v2.7 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted PNG file...

Privilege escalation

mojoPortal v2.7 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted PNG file...

CVE-2022-40341

mojoPortal v2.7 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted PNG file...

CVE-2022-40341

mojoPortal v2.7 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted PNG file...

CVE-2022-40341

mojoPortal v2.7 contains an arbitrary file upload vulnerability that allows execution of arbitrary code via a crafted PNG file. This CVE-2022-40341 affects mojoPortal 2.7; root cause is an unvalidated file upload in PNG handling. The provided documents do not include a patch version or remediatio...

CVE-2022-40341

mojoPortal v2.7 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted PNG file...

CVE-2021-45790

An arbitrary file upload vulnerability was found in Metersphere v1.15.4. Unauthenticated users can upload any file to arbitrary directory, where attackers can write a cron job to execute commands...

CVE-2021-45790

An arbitrary file upload vulnerability was found in Metersphere v1.15.4. Unauthenticated users can upload any file to arbitrary directory, where attackers can write a cron job to execute commands...

CVE-2021-45790

An arbitrary file upload vulnerability was found in Metersphere v1.15.4. Unauthenticated users can upload any file to arbitrary directory, where attackers can write a cron job to execute commands...

Design/Logic Flaw

An arbitrary file upload vulnerability was found in Metersphere v1.15.4. Unauthenticated users can upload any file to arbitrary directory, where attackers can write a cron job to execute commands...

MeterSphere 代码问题漏洞

MeterSphere is MeterSphere's open source one-stop open source continuous testing platform. metersphere has an arbitrary file upload vulnerability, which can be exploited by remote attackers to submit special requests that can upload malicious files and write cron jobs to execute commands...

WordPress Scripts Organizer Arbitrary File Upload Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An arbitrary file upload...