Lucene search
+L

16474 matches found

Prion
Prion
•added 2022/04/10 9:15 p.m.•22 views

Design/Logic Flaw

An arbitrary file upload vulnerability at /zbzedit/php/zbz.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

7.5CVSS9.6AI score0.01558EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2022/04/10 9:15 p.m.•23 views

Design/Logic Flaw

An arbitrary file upload vulnerability at /admin/ajax.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

7.5CVSS9.6AI score0.01558EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2022/04/10 9:15 p.m.•31 views

Design/Logic Flaw

Newbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at /admin/goods/edit...

7.5CVSS9.6AI score0.01105EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2022/04/10 9:01 p.m.•90 views

CVE-2022-27477

Newbee-Mall v1.0.0 contains an arbitrary file upload vulnerability in the Upload function at /admin/goods/edit. The issue allows uploading arbitrary files, with the CVSS metrics showing high severity (CRITICAL in CVSS 3.1) and partial confidentiality/Integrity/Availability impacts. The provided c...

9.8CVSS9.5AI score0.01105EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/04/10 9:01 p.m.•37 views

CVE-2022-27477

Newbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at /admin/goods/edit...

9.8AI score0.01105EPSS
SaveExploits1References1
CVE
CVE
•added 2022/04/10 8:24 p.m.•103 views

CVE-2022-27129

CVE-2022-27129 affects zbzcms v1.0, where an arbitrary file upload vulnerability in /admin/ajax.php can be exploited to execute arbitrary PHP code via a crafted file. The issue enables remote code execution with no authentication and minimal prerequisites, as indicated by the associated CVSS data...

9.8CVSS9.5AI score0.01558EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/04/10 8:24 p.m.•37 views

CVE-2022-27131

An arbitrary file upload vulnerability at /zbzedit/php/zbz.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

9.8AI score0.01558EPSS
SaveExploits0References1
CVE
CVE
•added 2022/04/10 8:24 p.m.•108 views

CVE-2022-27131

CVE-2022-27131 affects zbzcms v1.0, with an arbitrary file upload vulnerability at /zbzedit/php/zbz.php that allows code execution via a crafted PHP file. Connected records from NVD/Red Hat/CNVD/CVE list confirm the vulnerability details across multiple sources; exploitation status and official r...

9.8CVSS9.5AI score0.01558EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2022/04/10 12:00 a.m.•38 views

zbzcms代码问题漏洞

zbzcms station helper CMS is a content management website of China station helper CMS zbzcms company. zbzcms version 1.0 has an arbitrary file upload vulnerability, which can be exploited by attackers to execute arbitrary code via specially crafted PHP files...

9.8CVSS6.1AI score0.01558EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/04/10 12:00 a.m.•14 views

newbee-mall 代码问题漏洞

newbee-mall is an e-commerce system. newbee-mall v1.0.0 has a security vulnerability that can be exploited by attackers to upload arbitrary files via the upload function of /admin/goods/edit...

9.8CVSS5.8AI score0.01105EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/04/10 12:00 a.m.•19 views

zbzcms代码问题漏洞

zbzcms station helper CMS is a content management website of China station helper CMS zbzcms company. zbzcms version 1.0 has an arbitrary file upload vulnerability, which can be exploited by attackers to execute arbitrary code via specially crafted PHP files...

9.8CVSS6.1AI score0.01558EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/10 12:00 a.m.•6 views

CVE-2022-27477: Unrestricted Upload of File with Dangerous Type

Newbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at /admin/goods/edit...

9.8CVSS8.3AI score0.01105EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/10 12:00 a.m.•4 views

CVE-2022-27129: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability at /admin/ajax.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS8.7AI score0.01558EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/10 12:00 a.m.•3 views

CVE-2022-27131: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability at /zbzedit/php/zbz.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS8.7AI score0.01558EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/04/08 4:15 p.m.•7 views

CVE-2022-27047

mogublogcms 5.2 suffers from upload arbitrary files without any limitation...

9.8CVSS5.9AI score0.01114EPSS
SaveExploits0References2
Prion
Prion
•added 2022/04/08 4:15 p.m.•19 views

Design/Logic Flaw

mogublogcms 5.2 suffers from upload arbitrary files without any limitation...

7.5CVSS9.5AI score0.01114EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2022/04/08 3:42 p.m.•19 views

CVE-2022-27047

mogublogcms 5.2 suffers from upload arbitrary files without any limitation...

7.1AI score
SaveExploits0References3
attackerkb
attackerkb
•added 2022/04/08 9:15 a.m.•6 views

CVE-2022-27061

AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the Post Image function under the Admin panel. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

7.2CVSS6.2AI score0.02673EPSS
SaveExploits3References4
OSV
OSV
•added 2022/04/08 9:15 a.m.•34 views

CVE-2022-27061

AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the Post Image function under the Admin panel. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

7.2CVSS8.2AI score0.02673EPSS
SaveExploits3References3
NVD
NVD
•added 2022/04/08 9:15 a.m.•37 views

CVE-2022-27061

AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the Post Image function under the Admin panel. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

7.2CVSS0.02673EPSS
SaveExploits3References3
Rows per page
Query Builder