106 matches found
CVE-2025-29708: External Control of File Name or Path
SourceCodester Company Website CMS 1.0 contains a file upload vulnerability via the "Create Services" file /dashboard/Services...
CVE-2025-29709: External Control of File Name or Path
SourceCodester Company Website CMS 1.0 has a File upload vulnerability via the "Create portfolio" file /dashboard/portfolio...
CVE-2025-29819: External Control of File Name or Path
External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally...
CVE-2024-10210: External Control of File Name or Path
An External Control of File Name or Path vulnerability in the APROL Web Portal used in B&R APROL 4.4-005P may allow an authenticated network-based attacker to access data from the file system...
CVE-2025-29930: External Control of File Name or Path
imFAQ is an advanced questions and answers management system for ImpressCMS. Prior to 1.0.1, if the $GET'seoOp' parameter is manipulated to include malicious input e.g., seoOp=php://filter/read=convert.base64-encode/resource=/var/www/html/config.php, the application could allow an attacker to rea...
CVE-2025-24054: External Control of File Name or Path
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-25761: External Control of File Name or Path
HkCms v2.3.2.240702 was discovered to contain an arbitrary file write vulnerability in the component Appcenter.php...
CVE-2025-1686: External Control of File Name or Path
Versions of the package io.pebbletemplates:pebble from 0 and before 4.1.0 are vulnerable to External Control of File Name or Path via the include tag. A high privileged attacker can access sensitive local files by crafting malicious notification templates that leverage this tag to include files...
CVE-2024-43451: External Control of File Name or Path
NTLM Hash Disclosure Spoofing Vulnerability...
CVE-2024-43615: External Control of File Name or Path
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability...
CVE-2024-43581: External Control of File Name or Path
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability...
CVE-2024-38029: External Control of File Name or Path
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability...
CVE-2024-9142: External Control of File Name or Path
External Control of File Name or Path, : Incorrect Permission Assignment for Critical Resource vulnerability in Olgu Computer Systems e-Belediye allows Manipulating Web Input to File System Calls. This issue affects e-Belediye: before 2.0.642...
CVE-2024-38173: External Control of File Name or Path
Microsoft Outlook Remote Code Execution Vulnerability...
CVE-2024-38165: External Control of File Name or Path
Windows Compressed Folder Tampering Vulnerability...
CVE-2024-23317
The CVE-2024-23317 issue affects Gallagher Controller 6000 and Controller 7000 (versions 8.60 and earlier; 8.70 before 8.70.240520a; 8.80 before 8.80.240520a; 8.90 before 8.90.240520a; 9.00 before 9.00.240521a; 9.10 before 9.10.240520a). Root cause is External Control of File Name or Path (CWE-73...
CVE-2024-23317: External Control of File Name or Path
External Control of File Name or Path CWE-73 in the Controller 6000 and Controller 7000 allows an attacker with local access to the Controller to perform arbitrary code execution. This issue affects: 9.10 prior to vCR9.10.240520a distributed in 9.10.1268MR1, 9.00 prior to vCR9.00.240521a...
CVE-2024-38049: External Control of File Name or Path
Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability...
CVE-2024-25965: External Control of File Name or Path
Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains an external control of file name or path vulnerability. A local high privilege attacker could potentially exploit this vulnerability, leading to denial of service...