1510 matches found
Vulnerability of the /log/webmailattach.php script in the DAR-7000 router microprogramming system, allowing attackers to execute arbitrary commands
The vulnerability of the /log/webmailattach.php script in the DAR-7000 router microprogramming system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...
The vulnerability in the /sysmanage/updateos.php script of the D-Link DAR-7000 router’s microprogramming software allows a hacker to execute arbitrary commands.
The vulnerability of the /sysmanage/updateos.php script of the D-Link DAR-7000 router’s microprogramming system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Unrestricted file upload
Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to 3.1.8...
PT-2023-31952 · Unknown · Thorsten/Phpmyfaq
Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.8 Description: The issue is related to the unrestricted upload of files with dangerous types in the thorsten/phpmyfaq GitHub repository. Recommendations: For versions prior to 3.1.8, update to version...
CVE-2023-39377
SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method...
WordPress plugin Welcart e-Commerce code issue vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in the...
The vulnerability of the proxy server of the Zscaler Client Connector allows attackers to circumvent security restrictions and gain increased privileges.
The vulnerability of the Zscaler Client Connector software proxy relates to the unlimited download of dangerous files. Exploiting this vulnerability can allow a hacker to bypass security restrictions and enhance their privileges by sending specially crafted requests...
The vulnerability of the upload_post_image() function in the Forminator plugin of the WordPress content management system allows a hacker to bypass security restrictions and execute arbitrary code.
The vulnerability of the uploadpostimage function in the Forminator plugin of the WordPress content management system involves unlimited uploading of dangerous types of files. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions and execute arbitrary code...
Design/Logic Flaw
Unrestricted Upload of File with Dangerous Type vulnerability in Unisign Bookreen allows OS Command Injection.This issue affects Bookreen: before 3.0.0...
CVE-2023-3375 Unrestricted File Upload in Bookreen
Unrestricted Upload of File with Dangerous Type vulnerability in Unisign Bookreen allows OS Command Injection. This issue affects Bookreen: before 3.0.0...
The vulnerability of the J-Web interface in Juniper Networks Junos OS-based EX series devices allows a attacker to compromise data integrity and execute arbitrary code.
The vulnerability of the J-Web interface in Juniper Networks Junos OS devices of the EX series involves unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to compromise data integrity and execute arbitrary code remotely...
PT-2023-24005 · Unknown · E-Excellence U-Office Force
Name of the Vulnerable Software and Affected Versions: e-Excellence U-Office Force affected versions not specified Description: The file uploading function in e-Excellence U-Office Force does not restrict the upload of files with dangerous types. An unauthenticated remote attacker can exploit thi...
The vulnerability of the J-Web interface in Juniper Networks Junos OS-based SRX devices allows a hacker to execute arbitrary code.
The vulnerability of the J-Web interface in Juniper Networks Junos OS-based SRX devices involves unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2023-24517
Unrestricted Upload of File with Dangerous Type vulnerability in the Pandora FMS File Manager component, allows an attacker to make make use of this issue unrestricted file upload to execute arbitrary system commands. This issue affects Pandora FMS v767 version and prior versions on all platforms...
Artica Pandora FMS 代码问题漏洞
Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A security vulnerability exists in Artica Pandora FMS due to an unrestricted upload of dangerous types of files...
CVE-2023-39970
Unrestricted Upload of File with Dangerous Type vulnerability in AcyMailing component for Joomla. It allows remote code execution...
AcyMailing Joomla Component 代码问题漏洞
AcyMailing Joomla Component is an email marketing component used in the Joomla content management system. A security vulnerability exists in AcyMailing Joomla Component that stems from the unrestricted upload of dangerous types of files that allow remote code execution...
The vulnerability of the SCADA system SCADA Data Gateway (SDG) lies in its ability to load files of a dangerous type without limitation, allowing a intruder to execute arbitrary code.
The vulnerability of the SCADA system SCADA Data Gateway SDG is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...