YCCMS suffers from a file upload vulnerability (CNVD-2021-37964)

YCCMS is a PHP version of a lightweight CMS builder. YCCMS has a file upload vulnerability that can be exploited by attackers to gain control of the server...

There is a file upload vulnerability in Tianzhi Smart Hospital Integrated Quality Supervision Platform

Shenzhen Qianhai Tianzhi Information Technology Co., Ltd. is a national high-tech enterprise which firstly focuses on the management of hospital grade evaluation and the informationization construction of hospital comprehensive quality supervision platform. A file upload vulnerability exists in t...

File Upload Vulnerability in the Water Resources Project Management System of Siltronic Ltd.

SCT is an information service provider in China, dedicated to the cause of disaster mitigation and benefit reduction, and provides the government with comprehensive solutions for disaster mitigation and benefit reduction informatization. A file upload vulnerability exists in the water project...

File Upload Vulnerability in Open Virtual Simulation Experimental Teaching Management Platform Software of Beijing Runier Network Technology Co.

Beijing Runier Network Technology Co., Ltd. is a national high-tech enterprise registered in Beijing Haidian Cultural and Educational Industrial Park based on virtual simulation technology and network technology, mainly engaged in the research, development, sales, integration and service of...

File Upload Vulnerability in RG-EG Easy Gateway Web Management System

Ruijie Networks is a specialized network vendor with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products, storage, and more. A file upload vulnerability exists in the web management system of RG-EG Easy Gatewa...

CVE-2021-24284

The Kaswara Modern VC Addons WordPress plugin through 3.0.1 allows unauthenticated arbitrary file upload via the 'uploadFontIcon' AJAX action. The supplied zipfile being unzipped in the wp-content/uploads/kaswara/fontsicon directory with no checks for malicious files such as PHP...

File Upload Vulnerability in Online Learning Management System

Online Learning Management System is an online learning management system. A file upload vulnerability exists in Online Learning Management System, which can be exploited by an attacker to gain control of the server...

KonaWiki File Upload Vulnerability

KonaWiki is a lightweight Wiki system. The system is primarily used for writing manuscripts, keeping minutes and memos, etc. A file upload vulnerability exists in KonaWiki2 prior to version 2.2.4. The vulnerability stems from insufficient validation of files during program file uploads, which...

ArticleCMS File Upload Vulnerability

ArticleCMS is an application system. A multifaceted information website built on Bootstrap and ThinkPHP. A security vulnerability exists in ArticleCMS version 1.0. The vulnerability stems from a file upload vulnerability in the program, which could allow a remote malicious user to execute arbitra...

CVE-2020-20092

File Upload vulnerability exists in ArticleCMS 1.0 via the image upload feature at /admin by changing the Content-Type to image/jpeg and placing PHP code after the JPEG data, which could let a remote malicious user execute arbitrary PHP code...

File upload vulnerability in travel management system

The Travel Management System is a travel management system that uses C with source code. A file upload vulnerability exists in the Travel Management System that can be exploited by an attacker to gain control of the server...

File upload vulnerability in responsive-ordering-system

responsive-ordering-system online ordering system with POS and kitchen-side user interface. A file upload vulnerability exists in responsive-ordering-system, which can be exploited by an attacker to gain control of the server...

ArticleCMS 代码问题漏洞

ArticleCMS is an application system. A multifaceted information website built on Bootstrap and ThinkPHP. A security vulnerability exists in ArticleCMS version 1.0. The vulnerability stems from a file upload vulnerability in the program, which could allow a remote malicious user to execute arbitra...

File Upload Vulnerability in JTBC Web Content Management System (PHP) at Shanghai SevenWise Network Technology Co.

JTBC Web Content Management System PHP is a website system that can expand and clone existing modules. Ltd. JTBC Web Content Management System PHP has a file upload vulnerability that can be exploited by attackers to gain control of the server...

File Upload Vulnerability in MCms of Jiangxi Minsoft Technology Co. Ltd (CNVD-2021-36509)

MCms is an open source content management system. Ltd. MCms file upload vulnerability, an attacker can use the vulnerability to obtain control of the server...

File Upload Vulnerability in Lionfish Merchant Management System

Xiamen Lionfish Network Technology Co., Ltd. is an Internet innovation model software products and solutions as the core, mainly focusing on e-commerce system development and business solutions for high-tech enterprises. A file upload vulnerability exists in the Lionfish Merchant Management Syste...

Zebra Technologies FX9500 代码问题漏洞

The Zebra Technologies FX9500 formerly known as the Motorola FX9500 is an industrial-grade fixed RFID Radio Frequency Identification reader from Zebra Technologies, Inc. The Zebra Fixed RFID Reader FX9500 is vulnerable to a code issue. The vulnerability stems from the fact that an unauthenticated...

CVE-2021-23014

On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, and 14.1.x before 14.1.4, BIG-IP Advanced WAF and ASM are missing authorization checks for file uploads to a specific directory within the REST API which might allow Authenticated users with guest privileges to upload files. Note: Software...

Catfish CMS suffers from a file upload vulnerability

Catfish CMS is a free and open source PHP content management system. Catfish CMS has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Catfish Blog V3.9.0 File Upload Vulnerability in Backend

Catfish Blog is an open source free PHP blog. A file upload vulnerability exists in the backend of Catfish Blog V3.9.0, which can be exploited by an attacker to gain control of the server...