CVE-2021-44426

An issue was discovered in AnyDesk before 6.2.6 and 6.3.x before 6.3.5. An upload of an arbitrary file to a victim's local /Downloads/ directory is possible if the victim is using the AnyDesk Windows client to connect to a remote machine, if an attacker is also connected remotely with AnyDesk to...

CVE-2021-44426

The CVE-2021-44426 issue affects AnyDesk for Windows prior to version 6.2.6 and 6.3.x prior to 6.3.5. The vulnerability enables an attacker who is remotely connected to the same remote machine as the victim (without victim interaction) to upload an arbitrary file to the victim’s local ~/Downloads...

CVE-2022-38296

Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File Manager...

CVE-2022-38296

CVE-2022-38296 (Cuppa CMS v1.0) : The connected sources confirm an arbitrary file upload vulnerability via the File Manager. Nuclei indicates the impact could be remote code execution on the affected system. The CVE entry lists a 9.8 CVSS v3.1 score. Remediation guidance in the connected document...

CuppaCMS 代码问题漏洞

CuppaCMS is a content management system CMS. A security vulnerability exists in CuppaCMS v1.0, which stems from an arbitrary file upload vulnerability via the included file manager...

PT-2022-24346 · Cuppacms · Cuppacms

Name of the Vulnerable Software and Affected Versions: Cuppa CMS version 1.0 Description: The issue is related to an arbitrary file upload vulnerability via the File Manager. This allows for potential malicious file uploads. Recommendations: For Cuppa CMS version 1.0, consider disabling the File...

Arbitrary File Upload

feehi/cms is vulnerable to arbitrary file upload. The library only verifies the suffix of a file in the frontend, which allows an attacker to upload malicious files via the background avatar upload and remotely execute arbitrary code on the system...

GHSA-JJ62-MC3M-J769 FeehiCMS has an arbitrary file upload vulnerability

There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8.1 at the head image upload, that allows attackers to execute relevant PHP code...

FeehiCMS has an arbitrary file upload vulnerability

There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8.1 at the head image upload, that allows attackers to execute relevant PHP code...

Frontend File Manager < 21.3 - Subscriber+ Arbitrary File Upload

The plugin allows any authenticated users, such as subscriber, to rename a file to an arbitrary extension, like PHP, which could allow them to basically be able to upload arbitrary files on the server and achieve RCE 1. Navigate to the page where ffmwp shortcode is included as Subscriber 2. Uploa...

WordPress Frontend File Manager plugin <= 21.2 - Authenticated Arbitrary File Upload vulnerability

Authenticated Arbitrary File Upload vulnerability discovered by Raad Haddad Cloudyrion GmbH in WordPress Frontend File Manager plugin versions = 21.2. Solution Update the WordPress Frontend File Manager plugin to the latest available version at least 21.3...

PT-2022-4906

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration ZCS versions 8.8.15 and 9.0 Description An issue exists in Zimbra Collaboration ZCS that allows an attacker to upload arbitrary files through amavis via a cpio loophole. This loophole involves extracting files to the...

CVE-2020-21516

There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8 at the head image upload, that allows attackers to execute relevant PHP code...

CVE-2020-21516

There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8 at the head image upload, that allows attackers to execute relevant PHP code...

Design/Logic Flaw

There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8 at the head image upload, that allows attackers to execute relevant PHP code...

CVE-2020-21516

FeehiCMS 2.0.8 contains an arbitrary file upload vulnerability in the head image/avatar upload pathway, enabling attackers to execute PHP code on the server. The issue is documented across multiple sources (including Red Hat, Veracode, GHSA, OSV, and NVD) with CVSS v3.1 base score 9.8 (CRITICAL, ...

CVE-2020-21516

There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8 at the head image upload, that allows attackers to execute relevant PHP code...

PT-2022-8641 · Feehicms · Feehicms

Name of the Vulnerable Software and Affected Versions: FeehiCMS versions 2.0.8 through 2.0.8.1 Description: The issue is related to an arbitrary file upload vulnerability at the head image upload, allowing attackers to execute relevant PHP code. Recommendations: For FeehiCMS version 2.0.8, update...

FeehiCMS 代码问题漏洞

FeehiCMS is a Php-based CMS builder by Liufee Personal Developer. A security vulnerability exists in FeehiCMS version 2.0.8, which originates from an arbitrary file upload vulnerability during avatar upload. An attacker can exploit this vulnerability to execute related PHP code...

CM Download Manager < 2.8.6 - Admin+ Arbitrary File Upload

The plugin allows high privilege users such as admin to upload arbitrary files by setting the any extension via the plugin's setting, which could be used by admins of multisite blog to upload PHP files for example. PoC Activate PHP extension: - Log in and go to "CM Downloads" "Settings" "General"...