CVE-2022-4272 FeMiner wms unrestricted upload

A vulnerability, which was classified as critical, has been found in FeMiner wms. Affected by this issue is some unknown functionality of the file /product/savenewproduct.php?flag=1. The manipulation of the argument upfile leads to unrestricted upload. The attack may be launched remotely. The...

PT-2022-26519 · Unknown · Feminer Wms

Name of the Vulnerable Software and Affected Versions: FeMiner wms affected versions not specified Description: A critical issue has been found in FeMiner wms, affecting some unknown functionality of the file "/product/savenewproduct.php?flag=1". The manipulation of the upfile argument leads to...

CVE-2022-4272

A vulnerability, which was classified as critical, has been found in FeMiner wms. Affected by this issue is some unknown functionality of the file /product/savenewproduct.php?flag=1. The manipulation of the argument upfile leads to unrestricted upload. The attack may be launched remotely. The...

CVE-2022-4272

CVE-2022-4272 affects FeMiner wms. An unknown functionality at the endpoint "/product/savenewproduct.php?flag=1" is vulnerable to manipulation of the parameter upfile , leading to unrestricted file upload . Exploitation can be done remotely and has been disclosed publicly. Impact is described as ...

CVE-2022-4272: Incorrect Privilege Assignment

A vulnerability, which was classified as critical, has been found in FeMiner wms. Affected by this issue is some unknown functionality of the file /product/savenewproduct.php?flag=1. The manipulation of the argument upfile leads to unrestricted upload. The attack may be launched remotely. The...

CVE-2022-4272 FeMiner wms unrestricted upload

A vulnerability, which was classified as critical, has been found in FeMiner wms. Affected by this issue is some unknown functionality of the file /product/savenewproduct.php?flag=1. The manipulation of the argument upfile leads to unrestricted upload. The attack may be launched remotely. The...

CVE-2021-42897

A remote command execution RCE vulnerability was found in FeMiner wms V1.0 in /wms/src/system/datarec.php. The $POSTrname is directly passed into the $mysqlstr and is executed by exec...

CVE-2021-42897

A remote command execution RCE vulnerability was found in FeMiner wms V1.0 in /wms/src/system/datarec.php. The $POSTrname is directly passed into the $mysqlstr and is executed by exec...

CVE-2021-42897

A remote command execution RCE vulnerability was found in FeMiner wms V1.0 in /wms/src/system/datarec.php. The $POSTrname is directly passed into the $mysqlstr and is executed by exec...

Command injection

A remote command execution RCE vulnerability was found in FeMiner wms V1.0 in /wms/src/system/datarec.php. The $POSTrname is directly passed into the $mysqlstr and is executed by exec...

CVE-2021-42897

A remote command execution RCE vulnerability was found in FeMiner wms V1.0 in /wms/src/system/datarec.php. The $POSTrname is directly passed into the $mysqlstr and is executed by exec...

CVE-2021-42897

FeMiner wms v1.0 is affected by CVE-2021-42897. The vulnerability exists in /wms/src/system/datarec.php where the POST parameter $_POST[r_name] is directly passed into $mysqlstr and then executed by exec, enabling remote code execution over the network. The issue is described as a command injecti...

CVE-2021-42897: Improper Neutralization of Special Elements used in an OS Command

A remote command execution RCE vulnerability was found in FeMiner wms V1.0 in /wms/src/system/datarec.php. The $POSTrname is directly passed into the $mysqlstr and is executed by exec...

PT-2022-11739

Name of the Vulnerable Software and Affected Versions FeMiner wms version V1.0 Description A remote command execution issue was found in FeMiner wms. The vulnerability is located in /wms/src/system/datarec.php, where the r name variable from the $ POST request is directly passed into the $mysqlst...

FeMiner wms 操作系统命令注入漏洞

FeMiner wms is a repository management system for individual developers of Front End Miner FeMiner in China. FeMiner wms version 1.0 suffers from an operating system command injection vulnerability that stems from a Remote Command Execution RCE vulnerability found in /wms/src/system/datarec.php...