239 matches found
ZZCMS suffers from a file upload vulnerability (CNVD-2020-59411)
ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to gain control of the server...
Hainan Zanzan Network Technology Co., Ltd. aite cms there are file upload vulnerabilities
Aite cms specializes in corporate website building cms, providing a variety of corporate website templates. Hainan Zanzan Network Technology Co., Ltd Aite cms file upload vulnerability, attackers can use the vulnerability to upload malicious files to obtain control of the server...
File upload vulnerability in MCMS backend up***.do page
MCMS is a website building system of MINGFEI TECHNOLOGY CO. A file upload vulnerability exists in the MCMS backend up.do page. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...
Unspecified Vulnerability in Oracle Enterprise Session Border Controller
Oracle Enterprise Session Border Controller E-SBC connects disparate Internet Protocol IP communications networks while mitigating security threats, resolving interoperability issues, and ensuring reliable communications. A security vulnerability exists in the File Upload component in Oracle...
File upload vulnerability in BEESCMS backend up***.php page
BEESCMS is a scalable content management system CMS based on PHP and MySQL. A file upload vulnerability exists in the BEESCMS backend up.php page. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...
File Upload Vulnerability in CSZ CMS
CSZ CMS is an open source web application that allows to manage all the content and settings on a website. A file upload vulnerability exists in CSZ CMS, which can be exploited by an attacker to upload malicious files and gain administrative privileges on the server...
Extreme CMS suffers from a file upload vulnerability (CNVD-2020-32574)
Extreme CMS is an open source and free PHP web content management system. Extreme CMS has a file upload vulnerability that can be exploited by attackers to upload malicious files and obtain server administrative privileges...
File Upload Vulnerability in PHPOK of Shenzhen Kunshuo Technology Co., Ltd (CNVD-2020-33151)
PHPOK is a set of PHP language and MySQL database written using the enterprise website construction system. Ltd. PHPOK has a file upload vulnerability that can be exploited by attackers to gain control of the web server...
File upload vulnerability in PopojiCMS ad***_co***.php file
PopojiCMS is a content management system. A file upload vulnerability exists in the PopojiCMS adco.php file. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...
File Upload Vulnerability in Intimate Home Care Intimate Cat (imcat)
Intimate Cat imcat is a general-purpose website system designed in PHP+MySQL architecture. A file upload vulnerability exists in Intimate Cat imcat, which can be exploited by an attacker to upload a malicious file and then getshell it...
Langfang Extreme Networks Technology Co. Extreme CMS has file upload vulnerability
Extreme CMS is an open source PHPCMS web content management system. Ltd. Extreme CMS has a file upload vulnerability that can be exploited by attackers to upload malicious files to gain server privileges...
EBCMS suffers from a file upload vulnerability (CNVD-2020-25888)
EBCMS is a website management system based on PHP+MYSQL. A file upload vulnerability exists in EBCMS, which can be exploited by attackers to upload malicious files and gain administrative privileges on the server...
CVE-2020-9447
There is an XSS cross-site scripting vulnerability in GwtUpload 1.0.3 in the file upload functionality. Someone can upload a file with a malicious filename, which contains JavaScript code, which would result in XSS. Cross-site scripting enables attackers to steal data, change the appearance of a...
File Upload Vulnerability in YouDianCMS v8.0 Backend
Youdiancms Enterprise Website Management System is an enterprise website building system developed by Changsha Youdian Software Technology Co. YouDianCMS v8.0 has a file upload vulnerability, which can be exploited by an attacker to directly obtain server information, permissions, and so on...
File Upload Vulnerability in LJCMS of Beijing Liangjing Zhicheng Technology Co.
LJCMS is a free and open source content management system. A file upload vulnerability exists in LJCMS by Beijing Liangjingzhicheng Technology Co. It allows attackers to upload webshell and gain server privileges...
File upload vulnerability in MyUPB ad***_ic***.php file
MyUPB is a database-free forum that uses text files to store data. A file upload vulnerability exists in the MyUPB adic.php file. This allows an attacker to upload a webshell and gain server privileges...
File upload vulnerability in the background of Guojiz Web Site Navigation System V2.3.5
Guojiz website navigation system is a navigation website source code developed by PHP+MySQL with MYSQL database. A file upload vulnerability exists in the backend of Guojiz URL Navigation System V2.3.5. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...
CVE-2019-15862
An issue was discovered in CKFinder through 2.6.2.1. Improper checks of file names allows remote attackers to upload files without any extension even if the application was configured to accept files only with a defined set of extensions. This affects CKFinder for ASP, CKFinder for ASP.NET,...
Doccms 2016 has a file upload vulnerability
DocCMS rice husk enterprise building system, also known as rice husk cms, doccms, formerly known as deep throat enterprise building system ShlCms, is the industry's leading free open source enterprise website building system, enterprise website generation system. Doccms 2016 has a file upload...
WP Live Chat WordPress Plugin Re-Patches File Upload Flaw
A WordPress plugin vulnerability found in WP Live Chat could allow an attacker to upload arbitrary malicious files to vulnerable systems, according to researchers. WP Live Chat is a plugin for WordPress that equips websites with a small pop-up chat support window that site owners can use to...