CVE-2025-46080

BUG作者: yggcwhat 受影响版本: Huocms 厂商: https://huocms.com/ 源码地址: https://gitee.com/digital-flag/huocms 漏洞文件: AttachmentController.php 受影响版本： HuoCMS - controller -backend - AttachmentController.php:editFileUrl 在 editFileUrl 方法中调用的 copy 函数中，$newPathUrl 的后缀未经过白名单验证，可被利用来修改文件名。后缀由传入的 suffixurl 控制，且其可控。...

CVE-2023-27084

Permissions vulnerability found in isoftforce Dreamer CMS v.4.0.1 allows local attackers to obtain sensitive information via the AttachmentController parameter...

CVE-2024-43033

JPress through 5.1.1 on Windows has an arbitrary file upload vulnerability that could cause arbitrary code execution via ::$DATA to AttachmentController, such as a .jsp::$DATA file to io.jpress.web.commons.controller.AttachmentControllerupload. NOTE: this is unrelated to the attack vector for...

CVE-2024-43033

JPress through 5.1.1 on Windows has an arbitrary file upload vulnerability that could cause arbitrary code execution via ::$DATA to AttachmentController, such as a .jsp::$DATA file to io.jpress.web.commons.controller.AttachmentControllerupload. NOTE: this is unrelated to the attack vector for...

CVE-2024-43033

CVE-2024-43033 affects JPress up to version 5.1.1 on Windows, with an arbitrary file upload vulnerability that can lead to remote code execution via ::$DATA to AttachmentController#upload (e.g., a .jsp::$DATA file). This is a separate issue from CVE-2024-32358. The CVSS v3.1 base score is 8.8 (HI...

Design/Logic Flaw

Permissions vulnerability found in isoftforce Dreamer CMS v.4.0.1 allows local attackers to obtain sensitive information via the AttachmentController parameter...

CVE-2023-27084

CVE-2023-27084 concerns a permissions issue in isoftforce Dreamer CMS v4.0.1 that lets a local attacker access sensitive data via the AttachmentController parameter. The vulnerability is described as a local-attack, high confidentiality impact with medium overall CVSS (5.3) and no user interactio...

Dreamer CMS 安全漏洞

Dreamer CMS is a dreamer content management system by the individual developer Junnan Wang in China. A security vulnerability exists in isoftforce Dreamer CMS version v.4.0.1, which stems from a privilege vulnerability that can be exploited by a local attacker to gain access to sensitive...

CVE-2023-27084

Permissions vulnerability found in isoftforce Dreamer CMS v.4.0.1 allows local attackers to obtain sensitive information via the AttachmentController parameter...

FineCMS AttachmentController arbitrary file upload vulnerability

Source link: http://www.hackersb.cn/shenji/170.html Is still AttachmentController, of course, this is no longer kindeditorupload upload the file and then include the file so simple, but directly uploaded the script execution. This time the problem is ajaxswfuploadAction method, the method code is...