TYPO3 File Upload Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Typo3 Association. A file upload vulnerability exists in TYPO3, which can be exploited by an attacker to upload arbitrary data with arbitrary file extensions...

File Upload Vulnerability in UCMS Backend

UCMS is a simple open source content management system. A file upload vulnerability exists in the UCMS backend. An attacker can exploit the vulnerability to upload webshell and gain server privileges...

WMCMS suffers from a file upload vulnerability (CNVD-2021-24931)

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS file upload vulnerability can be exploited to gain control of the server...

File Upload Vulnerability in DedeCMSV6

DedeCMSV6 is based on PHP 7.x development, is scalable and fully open source. A file upload vulnerability exists in DedeCMSV6, which can be exploited by an attacker to cause arbitrary code execution...

Extreme cms suffers from file upload vulnerability (CNVD-2021-25003)

Extreme CMS is an open source and free PHPCMS web content management system. Extreme CMS has a file upload vulnerability that can be exploited by attackers to gain control of the server...

File upload vulnerability in DedeCMSV6 (CNVD-2021-25007)

DedeCMSV6 is based on PHP 7.x development, is scalable and fully open source. A file upload vulnerability exists in DedeCMSV6, which can be exploited by an attacker to cause arbitrary code execution...

File Upload Vulnerability in Netnifty Web Application Security Protection System

Web Application Security hereinafter referred to as: WAF is a Web security protection and application delivery network security products. WAF has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

File Upload Vulnerability in DedeCMSV6 Backend

DedeCMSV6 is based on PHP 7.x development, is scalable and fully open source. A file upload vulnerability exists in the DedeCMSV6 backend, which can be exploited by attackers to cause arbitrary code execution...

GHSA-2R6J-862C-M2V2 Unrestricted File Upload in Form Framework

Problem Due to the lack of ensuring file extensions belong to configured allowed mime-types, attackers can upload arbitrary data with arbitrary file extensions - however, default fileDenyPattern successfully blocked files like .htaccess or malicious.php. TYPO3 Extbase extensions, which implement ...

RGCMS suffers from a file upload vulnerability (CNVD-2021-24705)

RGCMS is an open source building management system. RGCMS has a file upload vulnerability that can be exploited by an attacker to gain server control privileges...

File Upload Vulnerability in ShuipFCMS

ShuipFCMS is a content management system based on ThinkPHP framework as the core and developed in an independent grouping approach. ShuipFCMS has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

File upload vulnerability in health collection reporting system (CNVD-2021-24510)

Health collection and reporting system using PHP + mysql development, open source code, to facilitate secondary development. Health Collection and Reporting System has a file upload vulnerability that can be exploited by attackers to gain control of the server...

File Upload Vulnerability in Ke361

Ke361 is an open source Taobao system. Ke361 suffers from a file upload vulnerability that can be exploited by attackers to gain control of a web server...

VulnCheck KEV: CVE-2021-3129

Laravel Ignition contains a file upload vulnerability that allows unauthenticated remote attackers to execute malicious code due to insecure usage of filegetcontents and fileputcontents...

File Upload Vulnerability in Digital Campus Integrated Management System of Anhui Kexun Education Equipment Co.

Digital campus is based on digital information and network, established on computer and network technology for the collection, processing, integration, storage, transmission and application of campus information on teaching, scientific research, management, technical services, life services, etc....

File Upload Vulnerability in NGFW of Netcom Next Generation Firewall (CNVD-2021-24752)

Netcom Next Generation Firewall NGFW is an application layer firewall launched by Netcom Technology that can comprehensively deal with network threats. A file upload vulnerability exists in NGFW. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

File upload vulnerability in We7 CMS (CNVD-2021-24741)

We7 CMS is a domestic asp.net-based at the same time with open source and open plug-in CMS system. A file upload vulnerability exists in We7 CMS. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

File Upload Vulnerability in Fusion Command and Dispatch System of Fujian Clarisonic Communication Co.

Founded in 2001, Fujian Qualicom Communication Co., Ltd. is a solution provider and operation service provider focusing on communication. A file upload vulnerability exists in the Converged Command and Dispatch System of Fujian Qualicom Communication Co. An attacker can exploit the vulnerability ...

CVE-2021-28379

CVE-2021-28379 affects Vesta Control Panel (VestaCP) and myVesta up to versions 0.9.8-27 / 0.9.8-26-39, where web/upload/UploadHandler.php does not enforce origin checks, allowing cross-origin file uploads. The vulnerability is described as a CSRF-style/file upload issue that can enable uploading...

File Upload Vulnerability in Droton Mental Health Cloud Platform Software

Jiangsu Zhodun Information Technology Co., Ltd. is an Internet dual-soft, high-tech enterprise specializing in the research and application of psychological big data. There is a file upload vulnerability in the software of ZhuoDun Mental Health Cloud Platform, which can be exploited by an attacke...