CVE-2020-25406

app\admin\controller\sys\Uploads.php in lemocms 1.8.x allows users to upload files to upload executable files...

CVE-2020-25406

CVE-2020-25406 affects lemocms 1.8.x, where app\admin\controller\sys\Uploads.php handles file uploads in a way that allows uploading executable files. The vulnerability arises in the file upload handling and could enable an attacker to upload executable content through the upload endpoint. Public...

HadSky Light Forum program has a file upload vulnerability

HadSky Light Forum program is a personal original PHP system. The HadSky Light Forum program has a file upload vulnerability that can be exploited by attackers to gain control of the server...

CVE-2020-28687

CVE-2020-28687 affects ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0. The vulnerability arises from the edit profile functionality, which allows remote attackers (authenticated users) to upload arbitrary files, enabling a potential remote code execution via a crafted profile picture (e....

Gila CMS File Upload Vulnerability

Gila CMS is an open source content management system CMS based on PHP and MySQL. A file upload vulnerability exists in Gila CMS 1.16.0. An attacker can exploit this vulnerability to upload a shell to the tmp directory, which can then be used to execute PHP files using .htaccess via the logging...

File upload vulnerability in Mu Feng CMS of Shijiazhuang Jiesou Network Technology Co.(CNVD-2020-68885)

Mu Feng CMS is Shijiazhuang JieSuo network 202 years launched a newest use of think PHP framework of the website background management system. A file upload vulnerability exists in Shijiazhuang Jiesou Network Technology Co. An attacker can exploit this vulnerability to gain control of the web...

Shijiazhuang Jiesou Network Technology Co., Ltd. Mu Feng CMS has unauthorized access vulnerability

Mu Feng CMS is Shijiazhuang JieSuo network 202 years launched a newest use of think PHP framework of the website background management system. A file upload vulnerability exists in Shijiazhuang Jiesou Network Technology Co. An attacker can use this vulnerability to directly modify the administrat...

File upload vulnerability in Billing Master Aj***.cl***.php file

Billing Master is a real estate agent ERP management system. A file upload vulnerability exists in the Billing Master Aj.cl.php file. An attacker can exploit this vulnerability to gain server privileges...

Unrestricted file upload

In Sentrifugo 3.2, users can share an announcement under "Organization - Announcements" tab. Also, in this page, users can upload attachments with the shared announcements. This "Upload Attachment" functionality is suffered from "Unrestricted File Upload" vulnerability so attacker can upload...

07FLY-CMS V1.1.4 has a file upload vulnerability

Zero Takeoff is a professional information technology service provider, mainly dedicated to the Internet basic business, website construction, management system, software customization, optimization and promotion, e-commerce operation and other comprehensive information technology services...

Victor CMS suffers from file upload vulnerability (CNVD-2020-66852)

Victor CMS is a simple content management system. Victor CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Victor CMS suffers from a file upload vulnerability (CNVD-2020-67388)

Victor CMS is a simple content management system. Victor CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Victor CMS suffers from file upload vulnerability (CNVD-2020-67324)

Victor CMS is a simple content management system. Victor CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...

File Upload Vulnerability in XHCMS Backend

XHCMS is a version of a general-purpose cms system that supports full site static. There is a file upload vulnerability in the background of XHCMS, which can be exploited by attackers to obtain server control privileges...

Victor CMS suffers from a file upload vulnerability

Victor CMS is a simple content management system. Victor CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Victor CMS suffers from a file upload vulnerability (CNVD-2020-67325)

Victor CMS is a simple content management system. Victor CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...

File Upload Vulnerability in Website Building System of Wuhan Jinglun Technology Development Co.

Wuhan Jinglun Technology Development Co., Ltd. is a company that mainly deals with software development, system integration, digital media marketing and other projects. A file upload vulnerability exists in the website building system of Wuhan Jinglun Technology Development Co. An attacker can us...

CVE-2020-24407

Magento versions 2.4.0 and 2.3.5p1 and earlier are affected by an unsafe file upload vulnerability that could result in arbitrary code execution. This vulnerability could be abused by authenticated users with administrative permissions to the System/Data and Transfer/Import components...

File Upload Vulnerability in easySite Content Management System

CSCL is a provider of artificial intelligence technology and informatization software and platforms. A file upload vulnerability exists in easySite Content Management System, which can be exploited by attackers to gain control of the server...

File upload vulnerability in MCms backend of Jiangxi Minsoft Technology Co. Ltd (CNVD-2020-64532)

Jiangxi Minsoft Technology Co., Ltd. business scope includes: information technology consulting services; Internet information services; computer software technology development and so on. Jiangxi Minsoft Technology Co., Ltd. MCms background file upload vulnerability, attackers can use the...