Unrestricted file upload

A file upload vulnerability in exists in Trend Micro Apex One server build 11110. Using a malformed Content-Length header in an HTTP PUT message sent to URL /officescan/console/html/cgi/fcgiOfcDDA.exe, an unauthenticated remote attacker can upload arbitrary files to the SampleSubmission directory...

CVE-2023-0587

A file upload vulnerability in exists in Trend Micro Apex One server build 11110. Using a malformed Content-Length header in an HTTP PUT message sent to URL /officescan/console/html/cgi/fcgiOfcDDA.exe, an unauthenticated remote attacker can upload arbitrary files to the SampleSubmission directory...

CVE-2023-0587

CVE-2023-0587 (Trend Micro Apex One) is a file upload vulnerability in Apex One server build 11110. An unauthenticated remote attacker can exploit a malformed Content-Length header in an HTTP PUT to /officescan/console/html/cgi/fcgiOfcDDA.exe to upload arbitrary files into the SampleSubmission di...

CVE-2023-0587

A file upload vulnerability in exists in Trend Micro Apex One server build 11110. Using a malformed Content-Length header in an HTTP PUT message sent to URL /officescan/console/html/cgi/fcgiOfcDDA.exe, an unauthenticated remote attacker can upload arbitrary files to the SampleSubmission directory...

CVE-2022-4395 Membership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload

The Membership For WooCommerce WordPress plugin before 2.1.7 does not validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as malicious PHP code, and achieve RCE...

PT-2023-1480 · Trend Micro · Trend Micro Apex One

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One server build 11110 Description: A file upload vulnerability exists in the Trend Micro Apex One server. Using a malformed Content-Length header in an HTTP PUT message sent to the "/officescan/console/html/cgi/fcgiOfcDDA.ex...

PT-2023-16333 · Unknown · Phpgurukul Online Security Guards Hiring System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Security Guards Hiring System version 1.0 Description: A vulnerability was found in the PHPGurukul Online Security Guards Hiring System, affecting some unknown functionality of the file search-request.php. The manipulation o...

CVE-2022-39045

A file write vulnerability exists in the httpd upload.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request can lead to arbitrary file upload. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2022-40035

File Upload Vulnerability found in Rawchen Blog-ssm v1.0 allowing attackers to execute arbitrary commands and gain escalated privileges via the /uploadFileList component...

CVE-2022-40035

File Upload Vulnerability found in Rawchen Blog-ssm v1.0 allowing attackers to execute arbitrary commands and gain escalated privileges via the /uploadFileList component...

CVE-2023-23314

An arbitrary file upload vulnerability in the /api/upload component of zdir v3.2.0 allows attackers to execute arbitrary code via a crafted .ssh file...

Exploit for Unrestricted Upload of File with Dangerous Type in Webdesi9 File_Manager

Description The File Manager wp-file-manager plugin before...

CVE-2023-23607

erohtar/Dasherr is a dashboard for self-hosted services. In affected versions unrestricted file upload allows any unauthenticated user to execute arbitrary code on the server. The file /www/include/filesave.php allows for any file to uploaded to anywhere. If an attacker uploads a php file they ca...

Privilege escalation

PopojiCMS v2.0.1 backend plugin function has a file upload vulnerability...

PopojiCMS 代码问题漏洞

Electron Technologies FZC PopojiCMS is an open source content management system CMS based on the Popoji framework from Electron Technologies FZC, USA. A security vulnerability exists in PopojiCMS version v2.0.1, which stems from a file upload vulnerability in the back-end plugin functionality...

PT-2023-15479 · Popojicms · Popojicms

Name of the Vulnerable Software and Affected Versions: PopojiCMS version 2.0.1 Description: The issue concerns a file upload vulnerability in the backend plugin function. Recommendations: For PopojiCMS version 2.0.1, consider disabling the file upload functionality in the backend plugin as a...

CVE-2022-47766

PopojiCMS v2.0.1 has a file upload vulnerability in the backend plugin function. The issue enables an attacker to upload files due to improper handling in the backend plugin, with CVSS v3.1 base score 8.8 (HIGH) and impact to confidentiality, integrity and availability. The vulnerability is docum...

PT-2023-14088 · Nvidia · Nvidia Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA BMC affected versions not specified Description: The issue concerns a vulnerability in the IPMI handler of NVIDIA BMC, allowing an authorized attacker to upload and download arbitrary files under certain circumstances. This may lead to...

CVE-2022-46610

72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-3416

The WPtouch WordPress plugin is affected: versions before 4.3.45 do not properly validate uploaded images, allowing high-privilege users (e.g., admins) to upload arbitrary files to the server (including in multisite setups). This is documented across multiple sources (Red Hat CVE entry, OpenVAS n...