15091 matches found
CVE-2022-31854
Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel...
CVE-2022-31854
Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel...
CVE-2022-31854
Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel...
CVE-2022-31854
Codoforum v5.1 contains an arbitrary file upload vulnerability exploitable via the logo-change option in the admin panel. The underlying flaw allows uploading files that can be executed on the server, potentially enabling remote code execution after authentication. Public exploit materials and re...
PT-2022-21083 · Snipe-It · Snipe-It
Name of the Vulnerable Software and Affected Versions: Snipe-IT version 6.0.2 Description: The issue allows attackers to execute arbitrary code via a crafted file, exploiting an arbitrary file upload vulnerability in the Update Branding Settings component. Recommendations: For Snipe-IT version...
CVE-2022-32060
An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file...
CVE-2022-32060
An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file...
Codoforum 代码问题漏洞
Codoforum is a PHP and MySQL based forum software. A security vulnerability exists in Codoforum v5.1, which originates from an arbitrary file upload vulnerability discovered via the logo change option in the admin panel...
WordPress Import any XML or CSV File plugin arbitrary file upload vulnerability
WordPress is a blogging platform developed using the PHP language. WordPress Import any XML or CSV File plugin versions prior to 3.6.8 are vulnerable to arbitrary file uploads, which originate from accepting all zip files and automatically extracting the zip file without validating the extracted...
CVE-2022-32413
An arbitrary file upload vulnerability in Dice v4.2.0 allows attackers to execute arbitrary code via a crafted file...
CVE-2022-32413
An arbitrary file upload vulnerability in Dice v4.2.0 allows attackers to execute arbitrary code via a crafted file...
Design/Logic Flaw
An arbitrary file upload vulnerability in Dice v4.2.0 allows attackers to execute arbitrary code via a crafted file...
CVE-2022-32413
An arbitrary file upload vulnerability in Dice v4.2.0 allows attackers to execute arbitrary code via a crafted file...
CVE-2022-32413
CVE-2022-32413 describes an arbitrary file upload vulnerability in Dice v4.2.0 that allows an attacker to execute arbitrary code through a crafted file. Public sources in the connected documents confirm impact as remote code execution via file upload, with exploitation details not provided in the...
Design/Logic Flaw
The Import any XML or CSV File to WordPress plugin before 3.6.8 accepts all zip files and automatically extracts the zip file without validating the extracted file type. Allowing high privilege users such as admin to upload an arbitrary file like PHP, leading to RCE...
CVE-2022-2268 WP All Import < 3.6.8 - Admin+ Arbitrary File Upload
The Import any XML or CSV File to WordPress plugin before 3.6.8 accepts all zip files and automatically extracts the zip file without validating the extracted file type. Allowing high privilege users such as admin to upload an arbitrary file like PHP, leading to RCE...
GHSA-4828-473V-37GH Unrestricted Upload of File with Dangerous Type in MCMS
MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability...
Unrestricted Upload of File with Dangerous Type in MCMS
MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability...