CVE-2022-27349: Unrestricted Upload of File with Dangerous Type

Social Codia SMS v1 was discovered to contain an arbitrary file upload vulnerability via addteacher.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-27357: Unrestricted Upload of File with Dangerous Type

Ecommerce-Website v1 was discovered to contain an arbitrary file upload vulnerability via /customerregister.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

Social Codia SMS 代码问题漏洞

Social Codia SMS is an inventory management system from Social Codia India. v1.0 of Social Codia SMS is vulnerable to arbitrary file uploads, which can be exploited by attackers to execute arbitrary code via crafted PHP files...

CVE-2021-43421: Unrestricted Upload of File with Dangerous Type

A File Upload vulnerability exists in Studio-42 elFinder 2.0.4 to 2.1.59 via connector.minimal.php, which allows a remote malicious user to upload arbitrary files and execute PHP code...

Studio 42 elFinder 代码问题漏洞

Studio 42 elFinder is an open source web file manager that uses jQuery and jQuery UI and is written in JavaScript. A security vulnerability exists in Studio 42 elFinder 2.0.4 that allows remote malicious users to upload arbitrary files and execute PHP code...

CVE-2022-26605

eZiosuite v2.0.7 contains an authenticated arbitrary file upload via the Avatar upload functionality...

CVE-2022-26605

eZiosuite v2.0.7 contains an authenticated arbitrary file upload via the Avatar upload functionality...

CVE-2022-26605

eZiosuite v2.0.7 contains an authenticated arbitrary file upload via the Avatar upload functionality...

Unrestricted file upload

eZiosuite v2.0.7 contains an authenticated arbitrary file upload via the Avatar upload functionality...

CVE-2022-26605

CVE-2022-26605 affects eZiosuite v2.0.7, where an authenticated user can upload arbitrary files through the Avatar upload functionality. The connected Red Hat, NVD, and CVE listings corroborate the issue and its authenticated exploit surface. The root cause, exact vulnerable component/file, and a...

CVE-2022-26605: Unrestricted Upload of File with Dangerous Type

eZiosuite v2.0.7 contains an authenticated arbitrary file upload via the Avatar upload functionality...

CVE-2022-26630

Jellycms v3.8.1 and below was discovered to contain an arbitrary file upload vulnerability via \app.\admin\Controllers\db.php...

CVE-2022-26630

Jellycms v3.8.1 and below was discovered to contain an arbitrary file upload vulnerability via \app.\admin\Controllers\db.php...

Privilege escalation

Jellycms v3.8.1 and below was discovered to contain an arbitrary file upload vulnerability via \app.\admin\Controllers\db.php...

CVE-2022-26630

CVE-2022-26630 affects Jellycms v3.8.1 and earlier. Multiple connected sources confirm an arbitrary file upload vulnerability via the path app/admin/Controllers/db.php, impacting potentially file upload functions. Exploit specifics, affected products beyond JellyCMS, and remediation steps are not...

CVE-2022-26630

Jellycms v3.8.1 and below was discovered to contain an arbitrary file upload vulnerability via \app.\admin\Controllers\db.php...

Hardcoded credentials

Halo Blog CMS v1.4.17 was discovered to allow attackers to upload arbitrary files via the Attachment Upload function...

CVE-2022-26619

Halo Blog CMS v1.4.17 was discovered to allow attackers to upload arbitrary files via the Attachment Upload function...

CVE-2022-26630: Unrestricted Upload of File with Dangerous Type

Jellycms v3.8.1 and below was discovered to contain an arbitrary file upload vulnerability via \app.\admin\Controllers\db.php...

CVE-2022-26619: Unrestricted Upload of File with Dangerous Type

Halo Blog CMS v1.4.17 was discovered to allow attackers to upload arbitrary files via the Attachment Upload function...