File Upload Vulnerability in LiveBOS of Fujian Vertex Software Co.

LiveBOS is an object-oriented business architecture middleware and its integrated development tools. A file upload vulnerability exists in LiveBOS of Fujian Vertex Software Corporation, which can be exploited by attackers to upload malicious files...

File Upload Vulnerability in MetaCRM6 of Beijing Meta Software Technology Co.

MetaCRM6 is a customer relationship management system. A file upload vulnerability exists in MetaCRM6, which can be exploited by attackers to upload malicious files...

File Upload Vulnerability in Digital Surveillance System of Zhejiang Dahua Technology Co.

Zhejiang Dahua Technology Co., Ltd. is the world's leading video-centered intelligent IOT solution provider and operation service provider. A file upload vulnerability exists in Digital Surveillance System of Zhejiang Dahua Technology Co. Ltd, which can be exploited by attackers to upload malicio...

EUVD-2024-44028

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'savepostmaterials' function in versions up to, and including, 4.2.6.5. This makes it possible for authenticated attackers, with Instructor-level permissio...

PT-2024-25122 · Roothub · Roothub

Name of the Vulnerable Software and Affected Versions: Roothub version 2.5 Description: The issue allows attackers to execute arbitrary code via a crafted JSP file, exploiting an arbitrary file upload vulnerability. This vulnerability is accessible via the customPath parameter in the upload...

File Upload Vulnerability in MetaCRM6 Customer Relationship Management System of Beijing Meta Software Technology Co. Ltd (CNVD-2024-24693)

Beijing Metsoft Technology Co., Ltd. is a professional customer relationship management software provider. A file upload vulnerability exists in the MetaCRM6 customer relationship management system of Beijing Meta Software Technology Co. Ltd, which can be exploited by an attacker to gain control ...

CVE-2024-33752

An arbitrary file upload vulnerability exists in emlog pro 2.3.0 and pro 2.3.2 at admin/views/plugin.php that could be exploited by a remote attacker to submit a special request to upload a malicious file to execute arbitrary code...

CVE-2024-33786

An arbitrary file upload vulnerability in Zhongcheng Kexin Ticketing Management Platform 20.04 allows attackers to execute arbitrary code via uploading a crafted file...

Triangle MicroWorks SCADA Data Gateway 安全漏洞

Triangle MicroWorks SCADA Data Gateway is a SCADA data gateway product developed by Triangle MicroWorks, Inc. and is mainly used for data acquisition and monitoring in industrial automation control systems. A file upload vulnerability exists in Triangle MicroWorks SCADA Data Gateway, which stems...

CVE-2024-1567

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to limited file uploads due to missing file type validation in the 'filevalidity' function in all versions up to, and including, 1.3.94. This makes it possible for unauthenticated attackers to upload dangerous file types...

CVE-2024-1567

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to limited file uploads due to missing file type validation in the 'filevalidity' function in all versions up to, and including, 1.3.94. This makes it possible for unauthenticated attackers to upload dangerous file types...

PT-2024-24151 · Code Projects · Code-Projects Simple School Managment System

Name of the Vulnerable Software and Affected Versions: Code-Projects Simple School Management System version 1.0 Description: The issue allows attackers to run arbitrary code via the upload of a crafted file, exploiting a File Upload vulnerability in the function for employees to upload avatars...

File upload vulnerability in SuperMap iServer of Beijing SuperMap Software Co. Ltd (CNVD-2024-23968)

SuperMap iServer is a cloud GIS application server based on high-performance cross-platform GIS kernel, providing full-featured GIS service publishing, management and aggregation capabilities, and supporting multi-level extension development. A file upload vulnerability exists in SuperMap iServer...

CVE-2024-29661

A File Upload vulnerability in DedeCMS v5.7 allows a local attacker to execute arbitrary code via a crafted payload...

WordPress Royal Elementor Addons and Templates plugin <= 1.3.94 - Unauthenticated Limited File Upload vulnerability

Unauthenticated Limited File Upload vulnerability discovered by wesley wcraft in WordPress Plugin Royal Elementor Addons versions = 1.3.94...

CVE-2024-23534

An Unrestricted File-upload vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM...

PT-2024-3040 · WordPress · Forminator

Name of the Vulnerable Software and Affected Versions: Forminator versions prior to 1.29.0 Description: The issue is related to an unrestricted upload of files with dangerous types in the Forminator plugin for WordPress. This could allow a remote attacker to upload arbitrary files to the server,...

CVE-2024-32161

jizhiCMS 2.5 suffers from a File upload vulnerability...

CVE-2024-32161

jizhiCMS 2.5 suffers from a File upload vulnerability...

JIZHICMS 安全漏洞

Extreme Networks Technology JIZHICMS Extreme CMS is an open source content management system CMS from China's Extreme Networks Technology. A security vulnerability exists in JIZHICMS version 2.5, which stems from the presence of a file upload vulnerability...