5509 matches found
CVE-2022-36769 IBM Cloud Pak for Data file upload
IBM Cloud Pak for Data 4.5 and 4.6 could allow a privileged user to upload malicious files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 232034...
CLTPHP 代码问题漏洞
CLTPHP is an open source PHP content management system for efficient website building. A security vulnerability exists in CLTPHP version 6.0 and earlier versions, which stems from the presence of a file upload vulnerability...
CVE-2023-26098
An issue was discovered in the Open Document feature in Telindus Apsal 3.14.2022.235 b. An attacker may upload a crafted file to execute arbitrary code...
CVE-2023-30613 Kiwi TCMS unrestricted file upload vulnerability
Kiwi TCMS, an open source test management system, allows users to upload attachments to test plans, test cases, etc. In versions of Kiwi TCMS prior to 12.2, there is no control over what kinds of files can be uploaded. Thus, a malicious actor may upload an .exe file or a file containing embedded...
PT-2023-21585 · Avalanche · Avalanche
Name of the Vulnerable Software and Affected Versions: Avalanche versions 6.3.x and below Description: An unrestricted upload of file with a dangerous type vulnerability exists that could allow an attacker to achieve remote code execution. Recommendations: For Avalanche versions 6.3.x and below,...
CVE-2023-25132
The CVE-2023-25132 vulnerability affects CyberPower PowerPanel Business family (Windows/Linux/macOS) with Local/Remote deployments prior to version 4.8.6. The issue is described as an unrestricted upload of a file with a dangerous type in the default.cmd file, enabling remote attackers to execute...
CVE-2023-1427 Photo Gallery by 10Web < 1.8.15 - Admin+ Path Traversal
The Photo Gallery by 10Web WordPress plugin before 1.8.15 did not ensure that uploaded files are kept inside its uploads folder, allowing high privilege users to put images anywhere in the filesystem via a path traversal vector...
CVE-2023-28962
The CVE-2023-28962 issue is a Junos OS J-Web vulnerability (upload-file.php) caused by improper authentication, enabling an unauthenticated, network-based attacker to upload arbitrary files to temporary folders. Affected products/versions include Juniper Networks Junos OS prior to 19.4R3-S11; 20....
CVE-2021-33990
Liferay Portal 6.2.5 allows Command=FileUpload&Type=File&CurrentFolder=/ requests when frmfolders.html exists. NOTE: The vendor disputes this issue because the exploit reference link only shows frmfolders.html is accessible and does not demonstrate how an unauthorized user can upload a file...
PT-2023-12239 · Liferay · Liferay Portal
Name of the Vulnerable Software and Affected Versions: Liferay Portal version 6.2.5 Description: The issue allows Command=FileUpload&Type=File&CurrentFolder=/ requests when frmfolders.html exists. The vendor disputes this issue because the exploit reference link only shows frmfolders.html is...
Apache Linkis Arbitrary File Upload Vulnerability
Apache Linkis is a library of the U.S. Apache Apache Foundation. Helps to easily connect various backend compute/storage engines. An arbitrary file upload vulnerability exists in Apache Linkis 1.3.1 and earlier versions, which stems from the PublicService module uploading files without restrictio...
CVE-2020-19802
File Upload vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to execute arbitrary code via the upload file type parameter...
Unrestricted file upload
File Upload vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to execute arbitrary code via the upload file type parameter...
Millken DoyoCms 代码问题漏洞
Millken DoyoCms is a Php free open source enterprise Cms website builder. A code issue vulnerability exists in Millken DoyoCMS v.2.3, which stems from a file upload vulnerability that allows remote attackers to execute arbitrary code via the upload file type parameter...
Apache Linkis 代码问题漏洞
Apache Linkis is a library of the U.S. Apache Apache Foundation. Helps to easily connect various backend compute/storage engines. An arbitrary file upload vulnerability exists in Apache Linkis 1.3.1 and earlier versions, which stems from the PublicService module uploading files without restrictio...
Online Computer and Laptop Store 代码问题漏洞
Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 contains an arbitrary file upload vulnerability, which stems from the lack of valid validation of uploaded files in file/admin/?page=user, and can...
PT-2023-7519 · Unknown · Semcms Shop
Name of the Vulnerable Software and Affected Versions: Semcms Shop version 4.2 Description: The issue is related to an arbitrary file upload vulnerability via the SEMCMS Upfile.php component. This allows attackers to execute arbitrary code by uploading a crafted PHP file. The vulnerability can be...
Automated Logic Corporation WebCTRL, i-VU, SiteScan Unrestricted Upload of File with Dangerous Type (CVE-2017-9650)
An Unrestricted Upload of File with Dangerous Type issue was discovered in Automated Logic Corporation ALC ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu 6.0 and prior; ALC WebCTRL, i-Vu, SiteScan Web 5.5 and prior; and ALC WebCTRL, i-Vu,...
Unrestricted file upload
File Upload vulnerability found in Monitorr v.1.7.6 allows a remote attacker t oexecute arbitrary code via a crafted file upload to the assets/php/upload.php endpoint...