14876 matches found
PT-2022-25830 · Unknown · Online Leave Management System
Name of the Vulnerable Software and Affected Versions: Online Leave Management System version 1.0 Description: The issue concerns an arbitrary file upload vulnerability in the component /leave system/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a...
CVE-2022-41512
An arbitrary file upload vulnerability in the component /phpaction/editFile.php of Online Diagnostic Lab Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-41379
An arbitrary file upload vulnerability in the component /leavesystem/classes/Users.php?f=save of Online Leave Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
Online Leave Management System 代码问题漏洞
Online Leave Management System is an online leave management system. version v1.0 of Online Leave Management System contains a security vulnerability that stems from the existence of an arbitrary file upload vulnerability allowing an attacker to execute arbitrary code via a crafted PHP file. No...
PT-2022-25900 · Unknown · Online Diagnostic Lab Management System
Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability in the /php action/editFile.php component...
WordPress Create Block Theme plugin <= 1.2.1 - Unauthenticated Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload vulnerability discovered in WordPress Create Block Theme plugin versions = 1.2.1. Solution Update the WordPress Create Block Theme plugin to the latest available version at least 1.2.2...
Create Block Theme < 1.2.2 - Unauthenticated Arbitrary File Upload
The plugin does not have authorisation and CSRF checks, as well as does not validate the file to be uploaded, which could allow unauthenticated attackers to upload arbitrary files to the server PoC As unauthenticated user, open The file will be uploaded at...
Create Block Theme < 1.2.2 - Unauthenticated Arbitrary File Upload
The plugin does not have authorisation and CSRF checks, as well as does not validate the file to be uploaded, which could allow unauthenticated attackers to upload arbitrary files to the server As unauthenticated user, open The file will be uploaded at...
CVE-2022-40721
Arbitrary file upload vulnerability in php uploader...
CVE-2022-40721
Arbitrary file upload vulnerability in php uploader...
CVE-2022-40721
Arbitrary file upload vulnerability in php uploader...
Design/Logic Flaw
Arbitrary file upload vulnerability in php uploader...
CVE-2022-40721
Arbitrary file upload vulnerability in php uploader...
CVE-2022-40721
The CVE-2022-40721 entry corresponds to an Arbitrary file upload vulnerability in CreativeDream php uploader. Multiple connected sources confirm that the issue stems from insufficient validation of uploaded files, enabling remote code execution via uploaded content. The NVD entry assigns a CVSS v...
CVE-2022-3125
The Frontend File Manager Plugin WordPress plugin before 21.3 allows any authenticated users, such as subscriber, to rename a file to an arbitrary extension, like PHP, which could allow them to basically be able to upload arbitrary files on the server and achieve RCE...
CVE-2022-3125 Frontend File Manager < 21.3 - Subscriber+ Arbitrary File Upload
The Frontend File Manager Plugin WordPress plugin before 21.3 allows any authenticated users, such as subscriber, to rename a file to an arbitrary extension, like PHP, which could allow them to basically be able to upload arbitrary files on the server and achieve RCE...
PT-2022-25494 · Unknown · Phpuploader
Name of the Vulnerable Software and Affected Versions: php uploader affected versions not specified Description: The issue is related to an arbitrary file upload vulnerability. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...
CVE-2022-40341
mojoPortal v2.7 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted PNG file...
