CVE-2022-36580

An arbitrary file upload vulnerability in the component /admin/products/controller.php?action=add of Online Ordering System v2.3.2 allows attackers to execute arbitrary code via a crafted PHP file...

Privilege escalation

An arbitrary file upload vulnerability in the component /admin/products/controller.php?action=add of Online Ordering System v2.3.2 allows attackers to execute arbitrary code via a crafted PHP file...

Privilege escalation

An arbitrary file upload vulnerability in the component /phpaction/createProduct.php of Garage Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-36582

An arbitrary file upload vulnerability in the component /phpaction/createProduct.php of Garage Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-36582

CVE-2022-36582 affects Garage Management System v1.0; the vulnerability is an arbitrary file upload in /php_action/createProduct.php that can lead to arbitrary code execution via a crafted PHP file. The CVE details are consistently described across sources (product, component, access path, and im...

CVE-2022-36580

An arbitrary file upload vulnerability in the component /admin/products/controller.php?action=add of Online Ordering System v2.3.2 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-36580

CVE-2022-36580 affects Online Ordering System v2.3.2 via the /admin/products/controller.php?action=add component, enabling arbitrary code execution through an crafted PHP file due to an arbitrary file upload vulnerability. Public sources in the connected documents reiterate the exact vulnerable c...

Online Ordering System 代码问题漏洞

Online Ordering System is a multi-store ordering system for janobe individual developers. It can be used for any small business. A security vulnerability exists in Online Ordering System version v2.3.2, which stems from its /admin/products/controller.php?action=add component that allows an attack...

PT-2022-23486 · Unknown · Garage Management System

Name of the Vulnerable Software and Affected Versions: Garage Management System version 1.0 Description: The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability in the /php action/createProduct.php component. Recommendations:...

Garage Management System 代码问题漏洞

SourceCodester Garage Management System Cms-Website is a garage management system by mayurik personal developer. It helps you to manage all your vehicles, cars and motorcycles. A security vulnerability exists in Garage Management System v1.0, which stems from its /phpaction/createProduct.php...

CVE-2022-36557

Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain an arbitrary file upload vulnerability via the restore backup function. This vulnerability allows attackers to execute arbitrary code via a crafted html file...

CVE-2022-36557

Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain an arbitrary file upload vulnerability via the restore backup function. This vulnerability allows attackers to execute arbitrary code via a crafted html file...

CVE-2022-36557

Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain an arbitrary file upload vulnerability via the restore backup function. This vulnerability allows attackers to execute arbitrary code via a crafted html file...

Design/Logic Flaw

Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain an arbitrary file upload vulnerability via the restore backup function. This vulnerability allows attackers to execute arbitrary code via a crafted html file...

CVE-2022-36557

Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain an arbitrary file upload vulnerability via the restore backup function. This vulnerability allows attackers to execute arbitrary code via a crafted html file...

CVE-2022-36557

CVE-2022-36557 affects Seiko SkyBridge MB-A100/MB-A110 (firmware v4.2.0 and earlier). The issue is an arbitrary file upload via the restore backup function that can lead to arbitrary code execution through a crafted HTML file. Remediation per connected documents: update to SkyBridge MB-A100/110 f...

CVE-2022-37159

Claroline 13.5.7 and prior is vulnerable to Remote code execution via arbitrary file upload...

Design/Logic Flaw

Claroline 13.5.7 and prior is vulnerable to Remote code execution via arbitrary file upload...

CVE-2022-37159

Claroline 13.5.7 and prior is vulnerable to Remote code execution via arbitrary file upload...

Claroline 代码问题漏洞

Claroline is an open source learning management system from Claroline Open Source. A security vulnerability exists in Claroline 13.5.7 and prior versions that originates from remote code execution via arbitrary file upload...