File upload vulnerability in Catfish Blog V3.9.0 backend (CNVD-2021-37306)

Catfish Blog is an open source free PHP blog. A file upload vulnerability exists in the backend of Catfish Blog V3.9.0, which can be exploited by an attacker to gain control of the server...

File Upload Vulnerability in Ke Xun Web-based Marking System

Anhui Kexun Education Equipment Co., Ltd. is mainly engaged in campus card, intelligent campus, intelligent campus information system, library self-borrowing and returning. A file upload vulnerability exists in Kexun's web-based marking system, which can be exploited by attackers to obtain server...

Cisco HyperFlex HX Data Platform Access Control Error Vulnerability

Cisco HyperFlex HX Data Platform is a network appliance from Cisco USA. Provides enterprise-class agility, scalability, security and lifecycle management capabilities. An access control error vulnerability exists in Cisco HyperFlex HX Data Platform, which can be exploited by an attacker to upload...

File upload vulnerability exists in RGCMS (CNVD-2021-35776)

RGCMS is an open source building management system. RGCMS has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

CVE-2021-1499

A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to upload files to an affected device. This vulnerability is due to missing authentication for the upload function. An attacker could exploit this vulnerabilit...

CVE-2020-19113

Arbitrary File Upload vulnerability in Online Book Store v1.0 in adminadd.php, which may lead to remote code execution...

File Upload Vulnerability in Dahua In-vehicle Integrated Management Platform of Zhejiang Dahua Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A file upload vulnerability exists in the Dahua vehicle integrated management platform of Zhejiang Dahua Technology Co. An attacker can exploit the vulnerability to upload a...

File Upload Vulnerability in Dahua In-vehicle Integrated Management Platform of Zhejiang Dahua Technology Co.(CNVD-2021-35890)

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A file upload vulnerability exists in the Dahua vehicle integrated management platform of Zhejiang Dahua Technology Co. An attacker can exploit the vulnerability to upload a...

CVE-2021-24252

The CVE-2021-24252 issue affects the WordPress Event Banner plugin prior to v1.4. The vulnerability arises because uploaded images are not verified, enabling admin users to upload arbitrary files (e.g., .exe, .php) that can lead to remote code execution (RCE). The flaw is aggravated by the absenc...

Cisco HyperFlex HX Data Platform 访问控制错误漏洞

Cisco HyperFlex HX Data Platform is a network appliance from Cisco USA. Provides enterprise-class agility, scalability, security and lifecycle management capabilities. An access control error vulnerability exists in Cisco HyperFlex HX Data Platform, which can be exploited by an attacker to upload...

File Upload Vulnerability in SEMCMS PHP (Multilingual) Version

SemCms is an open source foreign trade enterprise website management system. A file upload vulnerability exists in the PHP multilingual version of SEMCMS. An attacker can exploit the vulnerability to upload webshell and gain server privileges...

File Upload Vulnerability in Concrete Friends Concrete Enterprise Management System

Hunan AOKE Network Technology Co., Ltd. was founded in 2011, located in Changsha, Hunan Province, the capital of construction machinery, is China's concrete enterprise informatization solution provider. A file upload vulnerability exists in the concrete enterprise management system of concrete...

file upload vulnerability in semcms PHP version 2.0 backend

SemCms is a set of open source foreign trade enterprise website management system, mainly for foreign trade enterprises, compatible with IE, Firefox, google, 360 and other mainstream browsers semcms foreign trade website PHP version 2.0 background file upload vulnerability , attackers can use the...

CVE-2021-31933

A remote code execution vulnerability exists in Chamilo through 1.11.14 due to improper input sanitization of a parameter used for file uploads, and improper file-extension filtering for certain filenames e.g., .phar or .pht. A remote authenticated administrator is able to upload a file containin...

File upload vulnerability in ClassCMS backend (CNVD-2021-35844)

ClassCMS is a content management system. A file upload vulnerability exists in the ClassCMS backend. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

File upload vulnerability in PHPOK backend

PHPOK is a set of enterprise website system developed in PHP + MYSQL language. A file upload vulnerability exists in the PHPOK backend. An attacker can exploit the vulnerability to upload webshell and gain server privileges...

File upload vulnerability in XHCMS backend (CNVD-2021-34276)

XHCMS is a general-purpose cms system generated based on xhadmin, which supports full-site staticization. A file upload vulnerability exists in the background of XHCMS. Attackers can use this vulnerability to obtain server control privileges...

File upload vulnerability exists in WeCenter of Shenzhen Weik Interactive Co.(CNVD-2021-34219)

WeCenter is a php question and answer system developed in PHP MySQL. A file upload vulnerability exists in WeCenter by Shenzhen Weik Interactive Co. An attacker can use this vulnerability to overwrite server files to gain control of the server...

File Upload Vulnerability in Digital Production Management System of Weihang Haojian Technology (Shenzhen) Co.

Weihang Haojian Technology Shenzhen Co., Ltd. is a pure software enterprise focusing on the research and development and promotion of the application of graphic technology and intelligent informatization software products, which integrates scientific research, development, sales, consulting and...

File Upload Vulnerability in FineReport of SailSoft Software Ltd.

FineReport is the leading enterprise-class Web reporting tool. A file upload vulnerability exists in FineReport from SailSoft Software Ltd. that can be exploited by an attacker to upload arbitrary files...