15083 matches found
PT-2022-24355 · Aerocms · Aerocms
Name of the Vulnerable Software and Affected Versions: AeroCMS version 0.0.1 Description: The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability in the /admin/profile.php component. Recommendations: For AeroCMS version 0.0.1,...
CVE-2022-38296
Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File Manager...
CVE-2022-38296
Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File Manager...
CVE-2022-38296
Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File Manager...
CVE-2021-44426
An issue was discovered in AnyDesk before 6.2.6 and 6.3.x before 6.3.5. An upload of an arbitrary file to a victim's local /Downloads/ directory is possible if the victim is using the AnyDesk Windows client to connect to a remote machine, if an attacker is also connected remotely with AnyDesk to...
CVE-2021-44426
An issue was discovered in AnyDesk before 6.2.6 and 6.3.x before 6.3.5. An upload of an arbitrary file to a victim's local /Downloads/ directory is possible if the victim is using the AnyDesk Windows client to connect to a remote machine, if an attacker is also connected remotely with AnyDesk to...
Design/Logic Flaw
Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File Manager...
CVE-2021-44426
An issue was discovered in AnyDesk before 6.2.6 and 6.3.x before 6.3.5. An upload of an arbitrary file to a victim's local /Downloads/ directory is possible if the victim is using the AnyDesk Windows client to connect to a remote machine, if an attacker is also connected remotely with AnyDesk to...
CVE-2021-44426
The CVE-2021-44426 issue affects AnyDesk for Windows prior to version 6.2.6 and 6.3.x prior to 6.3.5. The vulnerability enables an attacker who is remotely connected to the same remote machine as the victim (without victim interaction) to upload an arbitrary file to the victim’s local ~/Downloads...
CVE-2022-38296
Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File Manager...
CVE-2022-38296
CVE-2022-38296 (Cuppa CMS v1.0) : The connected sources confirm an arbitrary file upload vulnerability via the File Manager. Nuclei indicates the impact could be remote code execution on the affected system. The CVE entry lists a 9.8 CVSS v3.1 score. Remediation guidance in the connected document...
CuppaCMS 代码问题漏洞
CuppaCMS is a content management system CMS. A security vulnerability exists in CuppaCMS v1.0, which stems from an arbitrary file upload vulnerability via the included file manager...
PT-2022-24346 · Cuppacms · Cuppacms
Name of the Vulnerable Software and Affected Versions: Cuppa CMS version 1.0 Description: The issue is related to an arbitrary file upload vulnerability via the File Manager. This allows for potential malicious file uploads. Recommendations: For Cuppa CMS version 1.0, consider disabling the File...
Arbitrary File Upload
feehi/cms is vulnerable to arbitrary file upload. The library only verifies the suffix of a file in the frontend, which allows an attacker to upload malicious files via the background avatar upload and remotely execute arbitrary code on the system...
GHSA-JJ62-MC3M-J769 FeehiCMS has an arbitrary file upload vulnerability
There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8.1 at the head image upload, that allows attackers to execute relevant PHP code...
FeehiCMS has an arbitrary file upload vulnerability
There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8.1 at the head image upload, that allows attackers to execute relevant PHP code...
Frontend File Manager < 21.3 - Subscriber+ Arbitrary File Upload
The plugin allows any authenticated users, such as subscriber, to rename a file to an arbitrary extension, like PHP, which could allow them to basically be able to upload arbitrary files on the server and achieve RCE 1. Navigate to the page where ffmwp shortcode is included as Subscriber 2. Uploa...
WordPress Frontend File Manager plugin <= 21.2 - Authenticated Arbitrary File Upload vulnerability
Authenticated Arbitrary File Upload vulnerability discovered by Raad Haddad Cloudyrion GmbH in WordPress Frontend File Manager plugin versions = 21.2. Solution Update the WordPress Frontend File Manager plugin to the latest available version at least 21.3...
PT-2022-4906
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration ZCS versions 8.8.15 and 9.0 Description An issue exists in Zimbra Collaboration ZCS that allows an attacker to upload arbitrary files through amavis via a cpio loophole. This loophole involves extracting files to the...