5524 matches found
File upload vulnerability in Guangxi Tianshou Network Technology Co.
Guangxi Tianhands Network Technology Co., Ltd. specializes in computer network information technology development and technical services, computer software technical consulting, technical services and technology transfer. Guangxi Tianshou Network Technology Co., Ltd. station building system there...
File Upload Vulnerability in Blue Ocean Premier Billing Management System
Chengdu Starry Blue Ocean Network Technology Co., Ltd. is a company whose business scope includes the sales of: computers and accessories, electronic products, communication products excluding radio transmitting equipment and so on. A file upload vulnerability exists in the Blue Ocean Excellence...
File Upload Vulnerability in EG Easy Gateway of Ruijie Networks Co.
Ruijie Networks Co., Ltd. is a professional network manufacturer with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products and storage. A file upload vulnerability exists in the EG Easy Gateway of Ruijie Networ...
Pluck CMS suffers from a file upload vulnerability (CNVD-2021-40249)
Pluck CMS is a PHP-based content management system. Pluck CMS suffers from a file upload vulnerability that can be exploited by an attacker to upload a webshell and gain server privileges...
CVE-2021-22358
CVE-2021-22358 affects Huawei FusionCompute 8.0.0. The issue is an insufficient input validation vulnerability that allows an attacker to upload arbitrary files to the device, potentially causing the service to become abnormal. Documents from multiple sources confirm the root cause and impact, wi...
Gallery From Files <= 1.6.0 - Unauthenticated RCE
The upload feature of the plugin does not properly check for the allowed extensions, allowing them to be set in the request and attempting to remove the dangerous ones such as .php and .js, but forgetting about .php4, .html etc. As a result, unauthenticated users could upload arbitrary .php4 file...
File upload vulnerability in YFCMF backend
YFCMF is a backend content management system using ThinkPHP 5.1. + foreign ACE 1.40 UI template. A file upload vulnerability exists in the background of YFCMF, which can be exploited by attackers to gain control of the server...
SP Project & Document Manager < 4.22 - Authenticated Shell Upload
The plugin allows users to upload files, however, the plugin attempts to prevent php and other similar files that could be executed on the server from being uploaded by checking the file extension. It was discovered that php files could still be uploaded by changing the file extension's case, for...
Bludit File Upload Vulnerability
Bludit is an open source, lightweight blog content management system CMS. A file upload vulnerability exists in Bludit version 3.12.0, which originates from a file upload found in the file path bl-plugins backup plugin.php, and can be exploited by an attacker to gain administrator privileges and ...
Unrestricted file upload
A file upload vulnerability was discovered in the file path /bl-plugins/backup/plugin.php on Bludit version 3.12.0. If an attacker is able to gain Administrator rights they will be able to use unsafe plugins to upload a backup file and control the server...
Bludit 代码问题漏洞
Bludit is an open source, lightweight blog content management system CMS. A file upload vulnerability exists in Bludit version 3.12.0, which originates from a file upload found in the file path bl-plugins backup plugin.php, and can be exploited by an attacker to gain administrator privileges and ...
ArticleCMS File Upload Vulnerability (CNVD-2021-36556)
ArticleCMS is an application system. A multifaceted information website built on Bootstrap and ThinkPHP. ArticleCMS has a file upload vulnerability. As there is no restriction on uploading files. An attacker can obtain a shell by uploading a file...
File Upload Vulnerability in PatrolFlow Multiservice Security Gateway Intelligent Management Platform
Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. A file upload vulnerability exists in PatrolFlow Multi-service Security Gateway Intelligent Management Platform. Attackers ca...
CatfishCMS suffers from a file upload vulnerability (CNVD-2021-39235)
CatfishCMS is a free and open source PHP content management system. A file upload vulnerability exists in CatfishCMS, which can be exploited by attackers to gain control of the server...
File Upload Vulnerability in Fisheye CMS (CNVD-2021-39271)
FishLeap CMS is a content management system specifically geared towards enterprise applications. A file upload vulnerability exists in Fishy CMS, which can be exploited by an attacker to write a malicious file to gain server control privileges...
File Upload Vulnerability in PHPOK of Shenzhen Kunshuo Technology Co.
PHPOK is a website building content management system to achieve customized open source free website building cms system. Ltd. PHPOK file upload vulnerability, attackers can use the vulnerability to obtain server privileges...
File Upload Vulnerability in PHPOK of Shenzhen Kunshuo Technology Co., Ltd (CNVD-2021-39278)
PHPOK is a website building content management system to achieve customized open source free website building cms system. PHPOK has a file upload vulnerability that can be exploited by attackers to execute arbitrary commands...
Pluck 命令注入漏洞
Pluck is a content management system CMS developed using the PHP language. A security vulnerability exists in Pluck-4.7.10-dev2, which originates from the admin background, and a remote command execution vulnerability exists when uploading files...
File Upload Vulnerability in Station Helpers CMS
Station Helpers CMS is a CMS open source system dedicated to creating a full-featured ... Station Helpers CMS has a file upload vulnerability that can be exploited by attackers to gain control of the server...