16317 matches found
CVE-2022-29624
An arbitrary file upload vulnerability in the Add File function of TPCMS v3.2 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-30819
In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "photosedit.php" file...
CVE-2022-30819
CVE-2022-30819 affects Wedding Management System v1.0, with an arbitrary file upload vulnerability at the photos_edit.php picture upload point. The root cause cited across sources is a lack of validation of uploaded files, enabling attackers to upload malicious files. Associated documents (CNVD/C...
CVE-2022-30820
CVE-2022-30820 affects Wedding Management v1.0. The vulnerability is an arbitrary file upload at the picture upload point in users_edit.php, enabling upload of potentially malicious files. CVSS v3.1 base score is 8.8 (HIGH) with network access and no authentication, according to the NVD entry; CV...
CVE-2022-30820
In Wedding Management v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "usersedit.php" file...
CVE-2022-30821
In Wedding Management System v1.0, the editing function of the "Services" module in the background management system has an arbitrary file upload vulnerability in the picture upload point of "packageedit.php" file...
CVE-2022-30821
CVE-2022-30821 affects Wedding Management System v1.0: the Services module’s package_edit.php picture upload point lacks file validation, enabling arbitrary file upload in the background management system. CNVD notes potential remote code execution via this vulnerability; no specific exploit deta...
CVE-2022-30822
In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "usersprofile.php" file...
CVE-2022-30822
The CVE-2022-30822 entry concerns Wedding Management System v1.0, where an arbitrary file upload vulnerability exists at the picture upload point in users_profile.php. Multiple connected sources describe it as enabling upload of malicious files, with some noting potential remote code execution. T...
CVE-2022-29725
An arbitrary file upload in the image upload component of wityCMS v0.6.2 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-29725
An arbitrary file upload in the image upload component of wityCMS v0.6.2 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-29725
The CVE-2022-29725 entry concerns Creatiwity wityCMS 0.6.2, where an arbitrary file upload in the image upload component enables code execution via a crafted PHP file. Documents indicate this is exploitable over the network with low complexity and no user interaction, potentially causing high-imp...
CVE-2022-29624: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the Add File function of TPCMS v3.2 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-30820: Unrestricted Upload of File with Dangerous Type
In Wedding Management v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "usersedit.php" file...
CVE-2022-30819: Unrestricted Upload of File with Dangerous Type
In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "photosedit.php" file...
CVE-2022-30822: Unrestricted Upload of File with Dangerous Type
In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "usersprofile.php" file...
CVE-2022-29725: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload in the image upload component of wityCMS v0.6.2 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-30821: Unrestricted Upload of File with Dangerous Type
In Wedding Management System v1.0, the editing function of the "Services" module in the background management system has an arbitrary file upload vulnerability in the picture upload point of "packageedit.php" file...
WordPress Allow svg files plugin <= 1.0 - Authenticated Arbitrary File Upload vulnerability
Authenticated Arbitrary File Upload vulnerability discovered by Luan Pedersini in WordPress Allow svg files plugin versions = 1.0. Solution Update the WordPress Allow svg files plugin to the latest available version at least 1.1...