CVE-2022-37181

72crm 9.0 has an Arbitrary file upload vulnerability...

CVE-2022-37181

72crm 9.0 has an Arbitrary file upload vulnerability...

Privilege escalation

72crm 9.0 has an Arbitrary file upload vulnerability...

CVE-2022-37181

72crm 9.0 has an Arbitrary file upload vulnerability...

CVE-2022-37181

The CVE-2022-37181 entry affects 72crm version 9.0, with an Arbitrary file upload vulnerability identified as the root cause. Public references across multiple sources (including Red Hat, NVD, OSV and PT-Security) confirm the issue is associated with 72crm 9.0. The PT-Security advisory states the...

72crm 代码问题漏洞

72crm is China's 72crm open source based on TP5.0 + ElementUI of the former CRMvueCRM system . 72crm 9.0 version has a security vulnerability , the vulnerability stems from the existence of arbitrary file upload vulnerability...

CVE-2022-36285 WordPress Uploading SVG, WEBP and ICO files plugin <= 1.0.1 - Authenticated Arbitrary File Upload vulnerability

Authenticated Arbitrary File Upload vulnerability in dmitrylitvinov Uploading SVG, WEBP and ICO files plugin = 1.0.1 at WordPress...

WordPress plugin Uploading SVG, WEBP and ICO files 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

CVE-2022-35150

Baijicms v4 was discovered to contain an arbitrary file upload vulnerability...

CVE-2022-35150

Baijicms v4 was discovered to contain an arbitrary file upload vulnerability...

CVE-2022-35150

Baijicms v4 was discovered to contain an arbitrary file upload vulnerability...

Privilege escalation

Baijicms v4 was discovered to contain an arbitrary file upload vulnerability...

CVE-2022-35150

Baijicms v4 contains an arbitrary file upload vulnerability due to lack of validation of uploaded files. Reported across multiple sources (CNVD/CNNVD/NI CVD records) with potential for remote code execution and high impact (based on CVSS 3.1 metrics: AV:N, AC:L, PR:N, UI:N, S:U, C:H, I:H, A:H). E...

CVE-2022-35150

Baijicms v4 was discovered to contain an arbitrary file upload vulnerability...

WordPress plugin Advanced Custom Fields 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Simple and Nice Shopping Cart Script 代码问题漏洞

Simple and Nice Shopping Cart Script is simple and nice PHP shopping cart script. Simple and Nice Shopping Cart Script suffers from a code issue vulnerability that stems from an unknown function in /mkshop/Men/profile.php, which can be exploited by an attacker to upload arbitrary files...

dotCMS Arbitrary File Upload (CVE-2022-26352; CVE-2018-5445)

An arbitrary file upload vulnerability exists in dotCMS. Successful exploitation of this vulnerability allows an attacker to execute arbitrary code on the vulnerable system with administrative privileges...

CVE-2022-2381

The E Unlocked - Student Result WordPress plugin through 1.0.4 is lacking CSRF and validation when uploading the School logo, which could allow attackers to make a logged in admin upload arbitrary files, such as PHP via a CSRF attack...

CVE-2022-2381 E Unlocked - Student Result <= 1.0.4 - Arbitrary File Upload via CSRF

The E Unlocked - Student Result WordPress plugin through 1.0.4 is lacking CSRF and validation when uploading the School logo, which could allow attackers to make a logged in admin upload arbitrary files, such as PHP via a CSRF attack...

WordPress Uploading SVG, WEBP and ICO files plugin <= 1.0.1 - Authenticated Arbitrary File Upload vulnerability

Authenticated Arbitrary File Upload vulnerability discovered by Universe Patchstack Alliance in WordPress Uploading SVG, WEBP and ICO files plugin versions = 1.0.1. Solution No patched version is available. Ignored by the vendor...