Mattermost File Upload Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a file upload vulnerability that stems from the application's lack of effective validation of uploaded files. An attacker can exploit this vulnerability to upload malicious file...

File upload vulnerability exists in U8+CRM of UFIDA Network Technology Co.(CNVD-2024-39247)

U8+CRM is a management software designed specifically for the agency sales and service industry that integrates CRM, call center, and OA core applications and provides integrated applications for front-end marketing, back-end business processing, and employee management. A file upload vulnerabili...

PT-2024-38849

Name of the Vulnerable Software and Affected Versions: Chengdu Everbrite Network Technology BeikeShop versions up to 1.5.5 Description: A critical issue has been found, affecting the rename function of the file /Admin/Http/Controllers/FileManagerController.php. The manipulation of the new name...

Kashipara Music Management System File Upload Vulnerability (CNVD-2024-37438)

Kashipara Music Management System is a music management system from Kashipara. A file upload vulnerability exists in Kashipara Music Management System version 1.0, which originates in /music/ajax.php?action=savemusic, which lacks validation of the uploaded file and can be exploited by an attacker...

Kashipara Music Management System File Upload Vulnerability

Kashipara Music Management System is a music management system from Kashipara. A file upload vulnerability exists in Kashipara Music Management System version 1.0, which stems from the lack of validation of uploaded files in /music/ajax.php?action=signup, and can be exploited by an attacker to...

File Upload Vulnerability in the Management Server of itC Center of Guangdong Paulan Electronics Co.(CNVD-2024-38833)

Ltd. is a high-tech enterprise integrating R&D, design, production, sales and service of audio-visual system overall solution products. There is a file upload vulnerability in the management server of Guangdong Paulan Electronics Co. itC Center, which can be exploited by an attacker to gain contr...

Kashipara Music Management System File Upload Vulnerability (CNVD-2024-37437)

Kashipara Music Management System is a music management system from Kashipara. A file upload vulnerability exists in Kashipara Music Management System version 1.0, which stems from /music/ajax.php?action=savegenre lacks effective validation of uploaded files and can be exploited by an attacker to...

Kashipara Music Management System File Upload Vulnerability (CNVD-2024-37439)

Kashipara Music Management System is a music management system from Kashipara. A file upload vulnerability exists in Kashipara Music Management System version 1.0, which stems from the lack of validation of uploaded files in /music/ajax.php?action=saveplaylist, and can be exploited by an attacker...

Kashipara Hotel Management System 安全漏洞

Kashipara Hotel Management System is a hotel management system from Kashipara. A file upload vulnerability exists in Kashipara Hotel Management System v1.0, which stems from the lack of validation of uploaded files in /admin/addroomcontroller.php, and can be exploited by an attacker to upload a...

File Upload Vulnerability in MSG5200-2GEC-4E-X4 and MSG2100E-UPON-4V at Risecomm Technology Development Co.

Ltd. is an industry-leading provider of optical networking products and system solutions. A file upload vulnerability exists in the MSG5200-2GEC-4E-X4 and MSG2100E-UPON-4V of Risecomm Technology Development Corporation, which can be exploited by an attacker to gain server privileges...

Rockwell Automation ThinManager ThinServer Unrestricted File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation ThinManager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ThinServer service. The issue results from the lack of proper...

CVE-2024-42780

An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=savegenre" in Kashipara Music Management System v1.0. This allows attackers to execute arbitrary code via uploading a crafted PHP file...

Kashipara Music Management System 安全漏洞

Kashipara Music Management System is a music management system from Kashipara. A file upload vulnerability exists in Kashipara Music Management System version 1.0, which stems from the lack of validation of uploaded files in /music/ajax.php?action=signup, and can be exploited by an attacker to...

Kashipara Music Management System 安全漏洞

Kashipara Music Management System is a music management system from Kashipara. A file upload vulnerability exists in Kashipara Music Management System version 1.0, which stems from the lack of validation of uploaded files in /music/ajax.php?action=saveplaylist, and can be exploited by an attacker...

CVE-2024-42676

File Upload vulnerability in Huizhi enterprise resource management system v.1.0 and before allows a remote attacker to execute arbitrary code via the /nssys/common/Upload. Aspx? Action=DNPageAjaxPostBack component...

CVE-2024-42676

File Upload vulnerability in Huizhi enterprise resource management system v.1.0 and before allows a remote attacker to execute arbitrary code via the /nssys/common/Upload. Aspx? Action=DNPageAjaxPostBack component...

PT-2024-30101 · Huizhi · Huizhi

Name of the Vulnerable Software and Affected Versions: Huizhi enterprise resource management system versions 1.0 and before Description: The issue allows a remote attacker to execute arbitrary code via the "/nssys/common/Upload.aspx?Action=DNPageAjaxPostBack" component. This is a File Upload...

CVE-2024-39397

Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution by an attacker. An attacker could exploit this vulnerability by uploading a malicious file whic...

CVE-2024-6823

The CVE-2024-6823 entry concerns the Media Library Assistant WordPress plugin. It enables arbitrary file uploads due to missing file type validation in the mla-inline-edit-upload-scripts AJAX action, affecting all versions up to 3.18. Exploitation requires authentication at Author level or higher...

CVE-2024-40482

An Unrestricted file upload vulnerability was found in "/Membership/editmember.php" of Kashipara Live Membership System v1.0, which allows attackers to execute arbitrary code via uploading a crafted PHP file...