CVE-2022-2678: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in SourceCodester Alphaware Simple E-Commerce System. It has been declared as critical. This vulnerability affects unknown code of the file adminfeature.php of the component Background Management Page. The manipulation leads to unrestricted upload. The attack can be...

GHSA-6W2F-6WQ3-RJVF RuoYi 4.7.3 vulnerable to arbitrary file upload in background management module

An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file...

RuoYi 4.7.3 vulnerable to arbitrary file upload in background management module

An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file...

CVE-2022-32065

An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file...

Design/Logic Flaw

An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file...

CVE-2022-32065

An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file...

CVE-2022-32065: Improper Neutralization of Input During Web Page Generation

An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file...

CVE-2021-40610

Emlog Pro v 1.0.4 cross-site scripting XSS in Emlog Pro background management...

CVE-2021-40610

Emlog Pro v 1.0.4 cross-site scripting XSS in Emlog Pro background management...

Cross site scripting

Emlog Pro v 1.0.4 cross-site scripting XSS in Emlog Pro background management...

CVE-2021-40610

Emlog Pro v 1.0.4 cross-site scripting XSS in Emlog Pro background management...

CVE-2021-40610: Improper Neutralization of Input During Web Page Generation

Emlog Pro v 1.0.4 cross-site scripting XSS in Emlog Pro background management...

CVE-2022-30821

In Wedding Management System v1.0, the editing function of the "Services" module in the background management system has an arbitrary file upload vulnerability in the picture upload point of "packageedit.php" file...

CVE-2022-30821

In Wedding Management System v1.0, the editing function of the "Services" module in the background management system has an arbitrary file upload vulnerability in the picture upload point of "packageedit.php" file...

CVE-2022-30821

In Wedding Management System v1.0, the editing function of the "Services" module in the background management system has an arbitrary file upload vulnerability in the picture upload point of "packageedit.php" file...

Privilege escalation

In Wedding Management System v1.0, the editing function of the "Services" module in the background management system has an arbitrary file upload vulnerability in the picture upload point of "packageedit.php" file...

CVE-2022-28445

KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module...

CVE-2022-28445

KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module...

Design/Logic Flaw

KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module...

CVE-2022-28445

KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module...