Online Travel Agency System 代码问题漏洞

Online Travel Agency System is an online travel agency system by Qaseem Hilal, an individual developer. A security vulnerability exists in Online Travel Agency System version 1.0, which originates from a file upload vulnerability in the file employeeinsert.php. The vulnerability can be exploited ...

Online Travel Agency System 代码问题漏洞

Online Travel Agency System is an online travel agency system. A file upload vulnerability exists in Online Travel Agency System v1.0, which stems from a lack of validation of uploaded files in the artical.php file. The vulnerability can be exploited to remotely execute arbitrary code by uploadin...

CVE-2023-38915

File Upload vulnerability in Wolf-leo EasyAdmin8 v.1.0 allows a remote attacker to execute arbtirary code via the upload type function...

PT-2023-26685 · Wolf Leo · Wolf-Leo Easyadmin8

Name of the Vulnerable Software and Affected Versions: Wolf-leo EasyAdmin8 version 1.0 Description: The issue allows a remote attacker to execute arbitrary code via the upload type function. This is a result of a File Upload vulnerability in the software. Recommendations: For Wolf-leo EasyAdmin8...

Unrestricted file upload

Plaintext Password vulnerability in AddAdmin.py in cms-dev/cms v1.4.rc1, allows attackers to gain sensitive information via audit logs...

CVE-2023-32564

Ivanti Avalanche FileStoreConfig Arbitrary File Upload Remote Code Execution vulnerability (CVE-2023-32564) affects Avalanche

CVE-2023-39776

A File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2023-39776

A File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute arbitrary code via uploading a crafted file...

Unrestricted file upload

A File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute arbitrary code via uploading a crafted file...

PT-2023-27102 · Phpjabbers · Phpjabbers Ticket Support Script

Name of the Vulnerable Software and Affected Versions: PHPJabbers Ticket Support Script version 3.2 Description: A File Upload issue allows attackers to execute arbitrary code via uploading a crafted file. Recommendations: For PHPJabbers Ticket Support Script version 3.2, consider disabling file...

SEMCMS 代码问题漏洞

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. A file upload vulnerability exists in SEMCMS version 3.9, which stems from the application's lack of effective validation of uploaded files and can be exploited by an attacker to run arbitrary code via...

Omeka S Code Issue Vulnerability

Omeka S is an open source web content management system CMS from Omeka, Inc. that specializes in creating and managing digital exhibitions and online digital archives. It is a new version of the Omeka project, and unlike the traditional Omeka Classic, Omeka S emphasizes multi-user collaboration a...

LinuxASMCallGraph Code Issue Vulnerability

LinuxASMCallGraph is an application from Jack Ren's personal developer. It is used to generate function call graphs from the ASM of GNU gcc&g++. LinuxASMCallGraph has a code issue vulnerability that stems from a file upload vulnerability. An attacker can use this vulnerability to cause the server...

Unrestricted file upload

A File Upload vulnerability in typecho v.1.2.1 allows a remote attacker to execute arbitrary code via the upload and options-general parameters in index.php...

CVE-2023-4121

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230722. It has been classified as critical. Affected is an unknown function. The manipulation of the argument fileupload leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been...

Unrestricted Upload File leads to Remote Code Execution

Description The upload file function is vulnerable that user can upload the file with other extensions .php, .phps, ... by using Magic Bytes technique. However, the .htaccess has almost prevented all the files with extensions such as php, phps, phtml, ... The attacker still can upload the hphp fi...

Uvdesk 代码问题漏洞

Uvdesk is a complete ticket support system open source by Uvdesk India. A security vulnerability exists in Uvdesk v1.1.3, which stems from the presence of a file upload vulnerability that can be exploited by an attacker to cause Remote Code Execution RCE...

PT-2023-26079 · Unknown · October Cms

Name of the Vulnerable Software and Affected Versions: October CMS version 3.4.4 Description: The issue allows attackers to execute arbitrary code via a crafted file, specifically an svg file, which can be uploaded to the system. This can be done in the context of a browser and requires the...

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System’s global network gateways, which stems from the lack of restrictions on file downloads, allows attackers to upload files to the privileged file system.

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System’s global network gateways is related to the lack of restrictions on file upload. Exploiting this vulnerability allows a malicious actor to upload files to the file system with root privilege...

CVE-2023-32637

GBrowse (the Generic Model Organism Database project) is affected by CVE-2023-32637 due to unrestricted file uploads: the product accepts files of any format and stores them in a web‑accessible area, enabling arbitrary code execution on the server by anyone who can upload. The connected documents...