239 matches found
CVE-2025-10480
A weakness has been identified in SourceCodester Online Student File Management System 1.0. This affects an unknown function of the file /savefile.php. Executing manipulation can lead to unrestricted upload. The attack may be launched remotely. The exploit has been made available to the public an...
CVE-2025-55835
File Upload vulnerability in SueamCMS v.0.1.2 allows a remote attacker to execute arbitrary code via the lack of filtering...
PT-2025-36488
Name of the Vulnerable Software and Affected Versions: N8N versions 1.95.3, 1.100.1, and 1.101.1 Description: An arbitrary file upload vulnerability exists in the Chat Trigger component of N8N. This allows attackers to execute arbitrary code by uploading a crafted HTML file. Recommendations: Upda...
PHPGurukul Online Shopping Portal 安全漏洞
Online Shopping Portal is an online store. A file upload vulnerability exists in Online Shopping Portal, which stems from a lack of extension validation in /admin/insert-product.php, and can be exploited by an attacker to cause arbitrary file uploads...
WordPress plugin Booster for WooCommerce 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A file upload vulnerability exists in the WordPress Booster for WooCommerce Plugin that stems from a lack of file type validation in the addfilestoorder function, which can be...
PT-2025-34940 · Livebos · Livebos
Name of the Vulnerable Software and Affected Versions: LiveBOS affected versions not specified Description: LiveBOS Server contains an arbitrary file upload flaw in the UploadFile.do;.js.jsp API endpoint. Unauthenticated remote attackers can upload crafted files outside the intended directory...
CVE-2025-9475
A flaw has been found in SourceCodester Human Resource Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /AdminDashboard/process/editemployeeprocess.php. This manipulation of the argument employeefile201 causes unrestricted upload. The attack may be...
Adobe Commerce Arbitrary Code Execution (APSB24-61)
The version of Adobe Commerce/Magento Open Source installed on the remote host falls within one of the following ranges 2.4.7.0 2.4.7-p2 Adobe Commerce / 2.4.6.0 2.4.6-p7 Adobe Commerce / 2.4.5.0 2.4.5-p9 Adobe Commerce / 0.x 2.4.4-p10 Adobe Commerce / 2.4.7.0 2.4.7-p2 Magento Open Source / 2.4.6...
PT-2025-34230 · Moss · Moss
Name of the Vulnerable Software and Affected Versions: Moss versions prior to 0.15 Description: Moss before version 0.15 contains a file upload issue. The configuration of the upload function permits attackers to upload files with any extension to arbitrary locations on the target server...
Moonshine 跨站脚本漏洞
Moonshine is a MoonShine open source admin panel software. A security vulnerability exists in Moonshine version v3.12.4, which stems from improper file upload control and could lead to arbitrary code execution...
Bottinelli Informatical Vedo Suite File Upload Vulnerability
Bottinelli Informatical Vedo Suite is an enterprise software suite for the textile and design industry from Bottinelli Informatica, Italy. A file upload vulnerability exists in Bottinelli Informatical Vedo Suite version 2024.17, which stems from a lack of effective validation of uploaded files by...
Liferay Portal and Liferay DXP have a Denial Of Service via File Upload (DOS) vulnerability
A Denial Of Service via File Upload DOS vulnerability in Liferay Portal 7.4.3.0 through 7.4.3.132, Liferay DXP 2025.Q1.0 through 2025.Q1.8, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.16 and 7.4 GA through update 92 allows a...
PT-2025-32402 · Unknown · Webpagetest
Name of the Vulnerable Software and Affected Versions: WebPageTest versions prior to 2.7 Description: WebPageTest versions 2.6 and earlier contain an arbitrary file upload flaw in the resultimage.php script. The application does not validate or sanitize user-supplied input before saving uploaded...
Themetags Writebot – AI Content Generator Saas React Template 安全漏洞
Themetags Writebot - AI Content Generator Saas React Template is an AI content generator template from Themetags. A security vulnerability exists in Themetags Writebot - AI Content Generator Saas React Template version 4.0.0 and earlier, which stems from a flaw in the file upload endpoint that...
CVE-2025-7443 BerqWP <= 2.2.42 - Unauthenticated Arbitrary File Upload
The BerqWP – Automated All-In-One Page Speed Optimization for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the storejavascriptcache.php file in all versions up to, and including, 2.2.4...
OpenEMR 代码问题漏洞
OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing requests. A security vulnerability exists in OpenEMR version 4.1.1 Patch 14, which stems fr...
SAMSUNG MagicINFO 9 Server File Upload Vulnerability (CNVD-2025-20804)
SAMSUNG MagicINFO 9 Server is an enterprise-class digital signage content management and device monitoring platform from Samsung Korea. A file upload vulnerability exists in SAMSUNG MagicINFO 9 Server, which stems from a failure to perform strict checks on uploaded file types. An attacker can...
DB-GPT 命令注入漏洞
DB-GPT is an AWEL and agent-based AI native data application development framework open-sourced by eosphoros. A security vulnerability exists in DB-GPT version 0.7.0, which stems from a file upload vulnerability in agent.hub.controller.refreshplugins that could lead to the execution of arbitrary...
PT-2025-29784 · WordPress · Medical Prescription Attachment Plugin For Woocommerce
Name of the Vulnerable Software and Affected Versions: Medical Prescription Attachment Plugin for WooCommerce versions n/a through 1.2.3 Description: The Medical Prescription Attachment Plugin for WooCommerce contains a flaw that permits the upload of arbitrary files, potentially including web...
