File Upload Vulnerability in Zhongwei Government Portal Group Management System

Jiangsu Zhongwei Technology Software System Co., Ltd. is mainly engaged in independent software technology research, product development; application system project development and construction; technical consulting, program consultant; cloud services and other businesses. A file upload...

File Upload Vulnerability in Smart IPTV System V3 of Shenzhen Zicentron Video Technology Co.

Zicentron IPTV system has telecom-grade full-service functions, supporting live TV broadcasting IGMP multicast mode and HLS unicast mode at the same time, 4K Ultra HD, time-shift playback, video-on-demand on the intranet, OTT on-demand on the extranet, desktop customization, application push,...

Nagios XI Arbitrary File Upload Vulnerability

Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting and rich data visualization. An arbitrary file upload vulnerability exists in Nagios XI 5.7.5 and earlier versions. The vulnerability stems from improper validatio...

File upload vulnerability in disk enterprise LCMS (CNVD-2021-43592)

Pan Enterprise LCMS is a lightweight PHP development framework . A file upload vulnerability exists in PanEnterprise LCMS. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

GHSA-PWHF-39XG-4RXW Script injection

Impact A malicious internal actor is able to upload documentation content with malicious scripts. These scripts would normally be sanitized by the TechDocs frontend, but by tricking a user to visit the content via the TechDocs API, the content sanitazion will be bypassed. If the TechDocs API is...

CVE-2020-36141

BloofoxCMS 0.5.2.1 allows Unrestricted File Upload vulnerability via bypass MIME Type validation by inserting 'image/jpeg' within the 'Content-Type' header...

Catfish CMS suffers from a file upload vulnerability (CNVD-2021-42363)

Catfish catfish CMS is open source and free PHPCMS web content management system. Catfish CMS has a file upload vulnerability. An attacker can use the vulnerability to upload a webshell and gain server privileges...

File Upload Vulnerability in Smart Meter Integrated Management System of Xintian Technology Co.

Xintian Technology Co., Ltd. is a professional manufacturer and supplier of water meters, energy meters and gas meters. A file upload vulnerability exists in the Smart Meter Integrated Management System of Xintian Technology Corporation, which can be exploited by attackers to gain control of the...

WellCMS File Upload Vulnerability

WellCMS is an open source with a billion load, tend to mobile, lightweight, with ultra-fast response ability of high load CMS, is a large amount of data, high concurrency access to the site's best choice of light CMS. has a safe, efficient, stable, ultra-fast speed, super load characteristics. A...

CVE-2020-21005

WellCMS 2.0 beta3 is vulnerable to File Upload. A user can log in to the CMS background and upload a picture. Because the upload file type is controllable, the user can modify the upload file type to get webshell...

File upload vulnerability exists in the Fish Leap CMS (CNVD-2021-41974)

FishLeap CMS is a content management system specifically geared towards enterprise applications. A file upload vulnerability exists in the backend of Fishy CMS, which can be exploited by attackers to gain server control privileges...

Synology Photo Station File Upload Vulnerability (CNVD-2021-39157)

Synology Photo Station is a solution for sharing pictures, videos and blogs over the Internet from Synology Inc. of Taiwan, China. A file upload vulnerability exists in Synology Photo Station versions prior to 6.8.14-3500, which originates from an unrestricted upload of a file with a dangerous ty...

File Upload Vulnerability in S-CMS Enterprise Website Builder System (CNVD-2021-41053)

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a file upload vulnerability in S-CMS, which can be exploited by an attacker to gain control of the server...

File Upload Vulnerability in Terminal Security System of Beijing Falcon Security Technology Co.

Terminal Security System V9.0 is a terminal security management platform specially designed for the government, military industry, energy, education, medical care and grouped enterprises. There is a file uploading vulnerability in the Terminal Security System of Beijing Falcon Security Technology...

File Upload Vulnerability in SecFox Security Audit System

SecFox Security Audit System is a security audit system of NetShen Information Technology Beijing Co. A file upload vulnerability exists in SecFox Security Audit System, which can be exploited by attackers to gain control of the server...

File Upload Vulnerability in Zhiwei CMS

Knowledge CMS is an open source website builder. A file upload vulnerability exists in Know CMS, which can be exploited by attackers to gain control of the server...

File upload vulnerability in the teaching resources service management platform of Wuhan Dongxin Tongbang Information Technology Co.

Teaching Resources Service Management Platform is a system based on B/S architecture, adopting the concept of multi-level platform design, with the core functions of educational resources aggregation, categorization and storage, regional sharing, etc., and supporting activities such as remote...

File Upload Vulnerability in Jianwen Project Management Software

Jianwen project management software is a core information platform that covers the whole project life cycle, the whole project management function, and the whole project stakeholders. Based on the core information platform, it establishes a unified information exchange platform between the...

Synology Photo Station 代码问题漏洞

Synology Photo Station is a solution for sharing pictures, videos and blogs over the Internet from Synology Inc. of Taiwan, China. A file upload vulnerability exists in Synology Photo Station versions prior to 6.8.14-3500, which originates from an unrestricted upload of a file with a dangerous ty...

File Upload Vulnerability in UFIDA NC Cloud Large Enterprise Digitization Platform

NC Cloud, a large enterprise digitalization platform, deeply applies the new generation of digital technologies to build an open, interconnected, convergent and intelligent integrated cloud platform and other three strategic directions for enterprise digital transformation, and provides 18...