CVE-2023-45384

KnowBand supercheckout 5.0.7 and 6.0.7 is vulnerable to Unrestricted Upload of File with Dangerous Type. In the module "Module One Page Checkout, Social Login & Mailchimp" supercheckout, a guest can upload files with extensions .php...

CVE-2023-45384

KnowBand supercheckout 5.0.7 and 6.0.7 is vulnerable to Unrestricted Upload of File with Dangerous Type. In the module "Module One Page Checkout, Social Login & Mailchimp" supercheckout, a guest can upload files with extensions .php...

PT-2023-29541 · Knowband · Knowband Supercheckout

Name of the Vulnerable Software and Affected Versions: KnowBand supercheckout versions 5.0.7 through 6.0.7 Description: The issue allows a guest to upload files with dangerous extensions, such as .php, in the "Module One Page Checkout, Social Login & Mailchimp" supercheckout module...

CVE-2023-45384

Known vulnerability CVE-2023-45384 affects KnowBand supercheckout versions 5.0.7 through 6.0.7. The issue is Unrestricted Upload of File with Dangerous Type via the module “Module One Page Checkout, Social Login & Mailchimp” (supercheckout), allowing a guest to upload files with extensions such a...

Unrestricted file upload

Unrestricted upload of file with dangerous type vulnerability in create template function in EasyUse MailHunter Ultimate 2023 and earlier allows remote authenticated users to perform arbitrary system commands with ‘NT Authority\SYSTEM‘ privilege via a crafted ZIP archive...

PT-2023-24737 · Easyuse · Easyuse Mailhunter Ultimate

Name of the Vulnerable Software and Affected Versions: EasyUse MailHunter Ultimate versions 2023 and earlier Description: The issue allows remote authenticated users to perform arbitrary system commands with ‘NT AuthoritySYSTEM‘ privilege via a crafted ZIP archive. This is due to an unrestricted...

The vulnerability in the /sysmanage/updateos.php script of the DAR-7000 router’s microprogramming software allows a attacker to execute arbitrary commands.

The vulnerability in the /sysmanage/updateos.php script of the DAR-7000 router’s microprogramming system involves unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Vulnerability of the /log/webmailattach.php script in the DAR-7000 router microprogramming system, allowing attackers to execute arbitrary commands

The vulnerability of the /log/webmailattach.php script in the DAR-7000 router microprogramming system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

The vulnerability in the /sysmanage/updateos.php script of the D-Link DAR-7000 router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the /sysmanage/updateos.php script of the D-Link DAR-7000 router’s microprogramming system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Unrestricted file upload

Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to 3.1.8...

PT-2023-31952 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.8 Description: The issue is related to the unrestricted upload of files with dangerous types in the thorsten/phpmyfaq GitHub repository. Recommendations: For versions prior to 3.1.8, update to version...

CVE-2023-39377

SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method...

WordPress plugin Welcart e-Commerce code issue vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in the...

The vulnerability of the proxy server of the Zscaler Client Connector allows attackers to circumvent security restrictions and gain increased privileges.

The vulnerability of the Zscaler Client Connector software proxy relates to the unlimited download of dangerous files. Exploiting this vulnerability can allow a hacker to bypass security restrictions and enhance their privileges by sending specially crafted requests...

The vulnerability of the upload_post_image() function in the Forminator plugin of the WordPress content management system allows a hacker to bypass security restrictions and execute arbitrary code.

The vulnerability of the uploadpostimage function in the Forminator plugin of the WordPress content management system involves unlimited uploading of dangerous types of files. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions and execute arbitrary code...

Design/Logic Flaw

Unrestricted Upload of File with Dangerous Type vulnerability in Unisign Bookreen allows OS Command Injection.This issue affects Bookreen: before 3.0.0...

CVE-2023-3375 Unrestricted File Upload in Bookreen

Unrestricted Upload of File with Dangerous Type vulnerability in Unisign Bookreen allows OS Command Injection. This issue affects Bookreen: before 3.0.0...

The vulnerability of the J-Web interface in Juniper Networks Junos OS-based EX series devices allows a attacker to compromise data integrity and execute arbitrary code.

The vulnerability of the J-Web interface in Juniper Networks Junos OS devices of the EX series involves unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to compromise data integrity and execute arbitrary code remotely...

PT-2023-24005 · Unknown · E-Excellence U-Office Force

Name of the Vulnerable Software and Affected Versions: e-Excellence U-Office Force affected versions not specified Description: The file uploading function in e-Excellence U-Office Force does not restrict the upload of files with dangerous types. An unauthenticated remote attacker can exploit thi...

The vulnerability of the J-Web interface in Juniper Networks Junos OS-based SRX devices allows a hacker to execute arbitrary code.

The vulnerability of the J-Web interface in Juniper Networks Junos OS-based SRX devices involves unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...