Design/Logic Flaw

Musical World v1 was discovered to contain an arbitrary file upload vulnerability via uploadedsongs.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-27357

CVE-2022-27357 affects Ecommerce-Website v1, exposing an arbitrary file upload vulnerability via /customer_register.php that allows executing crafted PHP code. Public references (e.g., Red Hat, CNVD, NVD, CNVD CNVD, PACKETSTORM) describe file upload leading to remote code execution, with PoCs and...

CVE-2022-27357

Ecommerce-Website v1 was discovered to contain an arbitrary file upload vulnerability via /customerregister.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-27351

Zoo Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /publichtml/applyvacancy. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-27352

The CVE-2022-27352 issue affects Simple House Rental System v1, where /app/register.php allows arbitrary file upload due to missing validation. The vulnerability enables remote code execution by uploading a crafted PHP file and then accessing it (e.g., /app/uploads/shell.php), as demonstrated by ...

CVE-2022-27352

Simple House Rental System v1 was discovered to contain an arbitrary file upload vulnerability via /app/register.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-27349

CVE-2022-27349 affects Social Codia SMS v1. The vulnerability is an arbitrary file upload via addteacher.php, allowing code execution through a crafted PHP file. Public references and PoCs show uploading a web shell (e.g., lmao.php) through the image field and accessing it at /img/lmao.php after ...

CVE-2022-27346

Affected software : Ecommece-Website v1.1.0 (PHP/MySQL admin panel). Vulnerability : Arbitrary file upload via /admin/index.php?slides, enabling execution of crafted PHP files. Root cause / details : Multiple sources (NVD/Red Hat CNVD/CVE listings) describe an unrestricted file upload path in the...

CVE-2022-27346

Ecommece-Website v1.1.0 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?slides. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-27064

CVE-2022-27064 : In Musical World v1, an arbitrary file upload vulnerability in uploaded_songs.php allows remote code execution via a crafted PHP file. Public PoCs show uploading a shell to /songs/uploaded_songs/shell.php due to missing file validation. Connected advisories (Red Hat RH:CVE-2022-2...

CVE-2022-27064

Musical World v1 was discovered to contain an arbitrary file upload vulnerability via uploadedsongs.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-27061

CVE-2022-27061 relates to AeroCMS v0.0.1, where an arbitrary file upload vulnerability exists in the Admin panel’s Post Image function. The root cause is unsafeguarded handling of uploaded PHP files, enabling an attacker to upload a crafted PHP payload and achieve arbitrary code execution. Public...

CVE-2022-27351: Unrestricted Upload of File with Dangerous Type

Zoo Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /publichtml/applyvacancy. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-27061: Unrestricted Upload of File with Dangerous Type

AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the Post Image function under the Admin panel. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-27352: Unrestricted Upload of File with Dangerous Type

Simple House Rental System v1 was discovered to contain an arbitrary file upload vulnerability via /app/register.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-27047: Unrestricted Upload of File with Dangerous Type

mogublogcms 5.2 suffers from upload arbitrary files without any limitation...

CVE-2022-27346: Unrestricted Upload of File with Dangerous Type

Ecommece-Website v1.1.0 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?slides. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-27064: Unrestricted Upload of File with Dangerous Type

Musical World v1 was discovered to contain an arbitrary file upload vulnerability via uploadedsongs.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-27349: Unrestricted Upload of File with Dangerous Type

Social Codia SMS v1 was discovered to contain an arbitrary file upload vulnerability via addteacher.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-27357: Unrestricted Upload of File with Dangerous Type

Ecommerce-Website v1 was discovered to contain an arbitrary file upload vulnerability via /customerregister.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...