Niushop open source mall file upload vulnerability

Niushop open source mall is a PHP open source mall system . Niushop open source mall file upload vulnerability , an attacker can use this vulnerability to obtain server control privileges...

File Upload Vulnerability in OurPHP Admin Backend

OurPHP is a PHP MySQL-based development of W3C-compliant site-building system. A file upload vulnerability exists in the administrative backend of OurPHP, which allows attackers to gain control of the web server...

Simple Employee Records System 1.0 Shell Upload

Exploit Title: Simple Employee Records System - File Upload RCE Unauthenticated Date: 2021-02-25 Exploit Author: [email protected] Vendor Homepage: https://www.sourcecodester.com/php/11393/employee-records-system.html Software Link:...

Simple Employee Records System 1.0 - File Upload RCE (Unauthenticated)

Exploit Title: Simple Employee Records System 1.0 - File Upload RCE Unauthenticated Date: 2021-02-25 Exploit Author: [email protected] Vendor Homepage: https://www.sourcecodester.com/php/11393/employee-records-system.html Software Link:...

File Upload Vulnerability in Sichuan Situzhi Travel Software Co.

Sichuan Situzhi Travel Software Co., Ltd. is a company focusing on providing digitalization, informatization and intelligence services for the development of intelligent tourism in the whole region. A file upload vulnerability exists in the website building system of Sichuan Situo Intelligent...

File uploading loophole in intelligent management service platform for official vehicles

Founded in October 2007, China Telecom Hongxin Information Technology Co., Ltd. is a wholly-owned subsidiary of China Telecom Group with independent legal personality. The company is based on SDICT comprehensive intelligent information service provider. A file upload vulnerability exists in the...

Exploit for Path Traversal in Vmware Cloud_Foundation

CVE-2021-21972 Vulnerability Description CVE-2021-21972:...

File Upload Vulnerability in the Cloud Platform of Teaching Video Application of Guangzhou Aoweiya Electronic Technology Co.

Teaching video application cloud platform is based on the background of the current educational video resources construction and user demand research, developed to adapt to the development of the times and meet the needs of the school, with the effectiveness, multi-functional, distinctive feature...

File upload vulnerability in waychar enrollment system (CNVD-2021-16014)

The waychar registration system is a tournament official website deployment service that enables one-stop deployment of official websites. A file upload vulnerability exists in the waychar registration system, which can be exploited by an attacker to gain server control privileges...

CVE-2021-3120

An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allows remote attackers to achieve remote code execution on the operating system in the security context of the web server. In order to exploit this vulnerability, an attacker must ...

Design/Logic Flaw

An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allows remote attackers to achieve remote code execution on the operating system in the security context of the web server. In order to exploit this vulnerability, an attacker must ...

File Upload Vulnerability in ECM Collaboration Management Platform

Micro macro ECM collaborative office OA and collaborative management platform is to enhance enterprise execution, creativity, learning, cohesion, control, decision-making, resilience of the seven forces of collaboration as the goal, to meet the enterprise personalized, refined, mobile management...

File Upload Vulnerability in VisualField SC***.exe Component at Zhejiang ZDZ Information Technology Co.

VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. A file upload vulnerability exists in the VisualField SC.exe component of Zhejiang ZDAC Information Technology Co. Ltd, which can be exploited by an attacker to...

CVE-2021-25780

CVE-2021-25780 affects Baby Care System 1.0. The vulnerability is an arbitrary file upload in posts.php that allows uploading content (including PHP files) to the server, enabling command execution and a shell. The available documents confirm the vulnerable component (posts.php) and the impact (r...

File Upload Vulnerability in Xunrui CMS

CMS is a content management framework based on CodeIgniter4. A file upload vulnerability exists in XunRui CMS. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

Sourcecodester Baby Care System 代码问题漏洞

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. It provides a baby care system. Sourcecodester Baby Care System is vulnerable to a file upload vulnerability that could be exploited by an attacker to cause execution of commands and gain contr...

Chengdu Zero Takeoff Network 07FLY-CRM V1 Exists File Upload Vulnerability

07FLY-CRM is zero take-off network development , based on the GPLv3 agreement issued for small and medium-sized management activities , to provide customer relationship management CRM, sales and marketing inventory JXC, human resources HRM, logistics office supplies, fixed assets, public...

File Upload Vulnerability in Zero Takeoff Customer Relationship Management System

Chengdu Zero Takeoff Network is an information service provider, mainly dedicated to the Internet basic business, website construction, management system, software customization, optimization and promotion, e-commerce operations and other full range of information technology services. There is a...

Online Car Rental 1.0 Shell Upload

Exploit Title: Online Car Rental 1.0 | Arbitrary file upload Exploit Author: Richard Jones Date: 2021/09/02 Vendor Homepage: https://www.sourcecodester.com/cc/14145/online-car-rental-system-using-phpmysql.html Software Link:...

File Upload Vulnerability in E-office OA Self-service Platform of Shanghai Panmicro Network Technology Co.

E-office OA self-service platform is a professional collaborative OA software for small and medium-sized organizations. A file upload vulnerability exists in the E-office OA self-service platform of Shanghai Panmicro Network Technology Co., Ltd. that can be exploited by an attacker to gain contro...