CVE-2022-2111 Unrestricted Upload of File with Dangerous Type in inventree/inventree

Unrestricted Upload of File with Dangerous Type in GitHub repository inventree/inventree prior to 0.7.2...

CVE-2021-33615

RSA Archer 6.8.00500.1003 P5 allows Unrestricted Upload of a File with a Dangerous Type...

CVE-2021-33615

RSA Archer 6.8.00500.1003 P5 allows Unrestricted Upload of a File with a Dangerous Type...

CVE-2022-1811

Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9...

Unrestricted file upload

Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9...

PT-2022-14131 · Publify · Publify

Name of the Vulnerable Software and Affected Versions: publify versions prior to 9.2.9 Description: The issue allows for the unrestricted upload of files with dangerous types. This can be exploited to manipulate requests and bypass protections, potentially leading to stored XSS attacks...

CVE-2022-1752

Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.2...

CVE-2021-43934 Elcomplus SmartPtt Unrestricted Upload of File with Dangerous Type

Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate upload requests, enabling a malicious user to potentially upload arbitrary files...

Elcomplus SmartPPT 代码问题漏洞

Elcomplus SmartPPT is an integrated voice and data scheduling software from Elcomplus USA. A code issue vulnerability exists in Elcomplus SmartPPT that stems from a lack of restriction on the size or number of files that can be uploaded. An attacker could exploit this vulnerability to upload or...

The vulnerability of the software for interacting with servers via CURL is related to deficiencies in the algorithm for calculating the checksum. This allows a hacker to compromise the integrity of the data.

The vulnerability of the software for interacting with servers via CURL is related to the storage of dangerous files. Exploiting this vulnerability allows a remote attacker to compromise the integrity of data...

CVE-2022-24136

Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can upload any PHP file, and then execute it...

CVE-2022-24136

Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can upload any PHP file, and then execute it...

CVE-2022-24136

Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can upload any PHP file, and then execute it...

CVE-2021-27428 GE UR family Unrestricted Upload of File with Dangerous Type

GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool validates the authenticity and integrity of firmware file before uploading the UR IED. An illegitimate user could upgrade firmware without...

CVE-2022-1033

Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0.6...

Unrestricted file upload

Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0.6...

CVE-2021-45835

The Online Admission System 1.0 allows an unauthenticated attacker to upload or transfer files of dangerous types to the application through documents.php, which may be used to execute malicious code or lead to code execution...

CVE-2022-0950

Unrestricted Upload of File with Dangerous Type in GitHub repository star7th/showdoc prior to 2.10.4...

CVE-2022-0950

Unrestricted Upload of File with Dangerous Type in GitHub repository star7th/showdoc prior to 2.10.4...

PT-2022-13550 · Showdoc · Showdoc

Name of the Vulnerable Software and Affected Versions: showdoc versions prior to 2.10.4 Description: The issue concerns an unrestricted upload of files with dangerous types in the GitHub repository star7th/showdoc. This is due to the upload feature allowing files with the extension .html, which c...