File upload vulnerability in BootCMS manage.php page

BootCMS is an open source content management system that runs under PHP + MySQL and is protected by a GPL license. A file upload vulnerability exists in the BootCMS manage.php page. An attacker can exploit the vulnerability to control server privileges by uploading a script Trojan...

Arbitrary file upload vulnerability in JTBC Web Content Management System (PHP) manage.inc.php page

JTBC website content management system PHP is a set of existing modules can be expanded and cloning of the core of the website system, using UTF-8 coding, to take the language/code/program two separate technical modes. An arbitrary file upload vulnerability exists in the JTBC Web Content Manageme...

CVE-2017-17976

CVE-2017-17976 affects Perfex CRM 1.9.7 and stems from an unrestricted file upload in the utilities.php workflow, enabling remote code execution. Public sources confirm an arbitrary file upload path via the elfinder feature (elfinder_init) and mkfile, demonstrated by reports referencing shell.php...

File Upload Vulnerability in UKCMS v1.1.0

UKcms is a simple, flexible and open source web content management system based on PHP7 and mysql technology. UKCMS v1.1.0 version exists file upload vulnerability, the vulnerability is due to the system does not strictly filter the file upload type. Attackers can use this vulnerability to upload...

Unrestricted file upload

An Unrestricted Upload Of File With Dangerous Type issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows a remote attacker to upload arbitrary files...

CVE-2018-3814

Craft CMS 2.6.3000 allows remote attackers to execute arbitrary PHP code by using the "Assets-Upload files" screen and then the "Replace it" option, because this allows a .jpg file to have embedded PHP code, and then be renamed to a .php extension...

File Upload Vulnerability in Thunderwind Movie CMS V3.3.0 UsersController.class.php Page

Thunderwind Movie CMS is a PHP based THINKPHP3.2.3 framework development, suitable for all kinds of video, film and television websites, film and television content management program. Thunderwind Movie CMS V3.3.0 File upload vulnerability exists in the UsersController.class.php page. Allows an...

The vulnerability of the DashboardFileReceiveServlet in the network management system by Brocade Network Advisor allows a attacker to upload a malicious file into the file system, where it can be executed.

The vulnerability of the DashboardFileReceiveServlet in the IP and SAN network management system exists due to an incorrect path name limitation in the access control mechanism. Exploiting this vulnerability allows a malicious actor to download a malicious file into the file system, where it can ...

Western Digital MyCloud - 'multi_uploadify' File Upload (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HEAD', :uri = '/web/', :pattern = /Apache/ include Msf::Exploit::Remote::HttpClient include Msf::Exploit::FileDropper def initializeinfo=...

Multiple File Upload Vulnerabilities in CLTPHP Content Management System

CLTPHP is a content management system based on ThinkPHP5 development with Layui framework in the backend. Multiple file upload vulnerabilities exist in the backend of the CLTPHP content management system, which allows attackers to log in to the backend and upload webshells to gain control of the...

Hangzhou Allview Software Co., Ltd. college security integrated platform upLoadAttachment.php page has file upload vulnerability

Hangzhou Allview Software Co., Ltd. is a multinational company specializing in fire safety management. A file upload vulnerability exists in the upLoadAttachment.php page of the university security integrated platform of Hangzhou Allview Software Co. It allows attackers to exploit the vulnerabili...

CVE-2017-17560

CVE-2017-17560 affects Western Digital MyCloud PR4100 devices (2.30.172). The web management component at /web/jquery/uploader/multi_uploadify.php exposes multipart file upload without authentication, enabling an attacker to place arbitrary files anywhere on the device and upload a PHP shell, lea...

CVE-2017-15054

TeamPass before version 2.1.27.9 is affected by an arbitrary file upload vulnerability in upload.files.php. An authenticated attacker can tamper with request parameters to select a branch, upload an arbitrary file, and access that file to execute code on the server (Remote Command Execution). Aff...

File Upload Vulnerability in SEMCMS_ASP_v4.5

SemCMS is an open source foreign trade enterprise website management system, written in vbscript language, combined with iis running, SemCMS is very suitable for foreign trade enterprises, e-commerce Internet use. SemCms ASPv4.5 version of the editor database backup file upload vulnerability ,...

Livebox File Upload Vulnerability

Livebox is a multifunctional ADSL modem. This product provides telephony, Internet access and TV playback. A file upload vulnerability exists in Livebox version 1.1. A remote attacker can exploit this vulnerability with specially crafted JavaScript code to upload or download arbitrary configurati...

Cohu 3960HD 'webupgrade' function file upload vulnerability

The Cohu 3960HD is an IP zoom camera from Cohu USA that is typically used as a traffic camera. A file upload vulnerability exists in the 'webupgrade' function in the Cohu 3960HD, which stems from the program failing to validate a file or process uploaded by the firmware. An attacker can exploit t...

Privilege escalation

October CMS build 412 is vulnerable to Apache configuration modification via file upload functionality resulting in site compromise and possibly other applications on the server...

zorovavi/blog SQL Injection Vulnerability

zorovavi/blog is a blogging system. A SQL injection vulnerability exists in zorovavi/blog 2017-10-17 and earlier. A remote attacker can exploit the vulnerability by sending the 'id' parameter to the recept.php file to upload arbitrary files...

CVE-2017-16798

In CMS Made Simple 2.2.3.1, the isfileacceptable function in modules/FileManager/action.upload.php only blocks file extensions that begin or end with a "php" substring, which allows remote attackers to bypass intended access restrictions or trigger XSS via other extensions, as demonstrated by...

TPshop Mall System v2.0.5 File Upload Vulnerability

TPshop is developed with thinkphp shop a free open source online store system. TPshop mall system v2.0.5 file upload vulnerability, attackers can exploit the vulnerability to upload any file...