Lucene search
+L

239 matches found

CNVD
CNVD
added 2020/10/18 12:00 a.m.13 views

ZZCMS suffers from a file upload vulnerability (CNVD-2020-59411)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to gain control of the server...

8.2AI score
SaveExploits0
CNVD
CNVD
added 2020/07/25 12:00 a.m.5 views

Hainan Zanzan Network Technology Co., Ltd. aite cms there are file upload vulnerabilities

Aite cms specializes in corporate website building cms, providing a variety of corporate website templates. Hainan Zanzan Network Technology Co., Ltd Aite cms file upload vulnerability, attackers can use the vulnerability to upload malicious files to obtain control of the server...

7AI score
SaveExploits0
CNVD
CNVD
added 2020/07/17 12:00 a.m.7 views

File upload vulnerability in MCMS backend up***.do page

MCMS is a website building system of MINGFEI TECHNOLOGY CO. A file upload vulnerability exists in the MCMS backend up.do page. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2020/07/15 12:00 a.m.15 views

Unspecified Vulnerability in Oracle Enterprise Session Border Controller

Oracle Enterprise Session Border Controller E-SBC connects disparate Internet Protocol IP communications networks while mitigating security threats, resolving interoperability issues, and ensuring reliable communications. A security vulnerability exists in the File Upload component in Oracle...

7.5CVSS8.9AI score0.008EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/06/08 12:00 a.m.3 views

File upload vulnerability in BEESCMS backend up***.php page

BEESCMS is a scalable content management system CMS based on PHP and MySQL. A file upload vulnerability exists in the BEESCMS backend up.php page. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2020/05/25 12:00 a.m.5 views

File Upload Vulnerability in CSZ CMS

CSZ CMS is an open source web application that allows to manage all the content and settings on a website. A file upload vulnerability exists in CSZ CMS, which can be exploited by an attacker to upload malicious files and gain administrative privileges on the server...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2020/05/24 12:00 a.m.6 views

Extreme CMS suffers from a file upload vulnerability (CNVD-2020-32574)

Extreme CMS is an open source and free PHP web content management system. Extreme CMS has a file upload vulnerability that can be exploited by attackers to upload malicious files and obtain server administrative privileges...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2020/05/19 12:00 a.m.10 views

File Upload Vulnerability in PHPOK of Shenzhen Kunshuo Technology Co., Ltd (CNVD-2020-33151)

PHPOK is a set of PHP language and MySQL database written using the enterprise website construction system. Ltd. PHPOK has a file upload vulnerability that can be exploited by attackers to gain control of the web server...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2020/05/07 12:00 a.m.2 views

File upload vulnerability in PopojiCMS ad***_co***.php file

PopojiCMS is a content management system. A file upload vulnerability exists in the PopojiCMS adco.php file. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2020/04/28 12:00 a.m.10 views

File Upload Vulnerability in Intimate Home Care Intimate Cat (imcat)

Intimate Cat imcat is a general-purpose website system designed in PHP+MySQL architecture. A file upload vulnerability exists in Intimate Cat imcat, which can be exploited by an attacker to upload a malicious file and then getshell it...

7AI score
SaveExploits0
CNVD
CNVD
added 2020/04/08 12:00 a.m.5 views

Langfang Extreme Networks Technology Co. Extreme CMS has file upload vulnerability

Extreme CMS is an open source PHPCMS web content management system. Ltd. Extreme CMS has a file upload vulnerability that can be exploited by attackers to upload malicious files to gain server privileges...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2020/04/03 12:00 a.m.4 views

EBCMS suffers from a file upload vulnerability (CNVD-2020-25888)

EBCMS is a website management system based on PHP+MYSQL. A file upload vulnerability exists in EBCMS, which can be exploited by attackers to upload malicious files and gain administrative privileges on the server...

7.1AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2020/02/28 4:15 p.m.8 views

CVE-2020-9447

There is an XSS cross-site scripting vulnerability in GwtUpload 1.0.3 in the file upload functionality. Someone can upload a file with a malicious filename, which contains JavaScript code, which would result in XSS. Cross-site scripting enables attackers to steal data, change the appearance of a...

6.1CVSS6.2AI score0.00759EPSS
SaveExploits1References3
CNVD
CNVD
added 2020/02/28 12:00 a.m.5 views

File Upload Vulnerability in YouDianCMS v8.0 Backend

Youdiancms Enterprise Website Management System is an enterprise website building system developed by Changsha Youdian Software Technology Co. YouDianCMS v8.0 has a file upload vulnerability, which can be exploited by an attacker to directly obtain server information, permissions, and so on...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2019/12/19 12:00 a.m.3 views

File Upload Vulnerability in LJCMS of Beijing Liangjing Zhicheng Technology Co.

LJCMS is a free and open source content management system. A file upload vulnerability exists in LJCMS by Beijing Liangjingzhicheng Technology Co. It allows attackers to upload webshell and gain server privileges...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2019/11/29 12:00 a.m.12 views

File upload vulnerability in MyUPB ad***_ic***.php file

MyUPB is a database-free forum that uses text files to store data. A file upload vulnerability exists in the MyUPB adic.php file. This allows an attacker to upload a webshell and gain server privileges...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2019/10/13 12:00 a.m.7 views

File upload vulnerability in the background of Guojiz Web Site Navigation System V2.3.5

Guojiz website navigation system is a navigation website source code developed by PHP+MySQL with MYSQL database. A file upload vulnerability exists in the backend of Guojiz URL Navigation System V2.3.5. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

7.3AI score
SaveExploits0
OSV
OSV
added 2019/09/26 9:15 p.m.10 views

CVE-2019-15862

An issue was discovered in CKFinder through 2.6.2.1. Improper checks of file names allows remote attackers to upload files without any extension even if the application was configured to accept files only with a defined set of extensions. This affects CKFinder for ASP, CKFinder for ASP.NET,...

7.5CVSS7.2AI score0.01523EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/05/09 12:00 a.m.2 views

Doccms 2016 has a file upload vulnerability

DocCMS rice husk enterprise building system, also known as rice husk cms, doccms, formerly known as deep throat enterprise building system ShlCms, is the industry's leading free open source enterprise website building system, enterprise website generation system. Doccms 2016 has a file upload...

7.3AI score
SaveExploits0
ThreatPost
ThreatPost
added 2019/05/06 9:42 p.m.161 views

WP Live Chat WordPress Plugin Re-Patches File Upload Flaw

A WordPress plugin vulnerability found in WP Live Chat could allow an attacker to upload arbitrary malicious files to vulnerable systems, according to researchers. WP Live Chat is a plugin for WordPress that equips websites with a small pop-up chat support window that site owners can use to...

7.5CVSS10AI score0.05062EPSS
SaveExploits2References10
Rows per page
Query Builder