5509 matches found
Unrestricted file upload
Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in multiple endpoints it leading to Code Execution...
Sourcecodester Vehicle Service Management System 代码问题漏洞
Sourcecodester Vehicle Service Management System is an open source PHP project. A simple web application for automotive repair/service stores or businesses. Sourcecodester Vehicle Service Management System suffers from a file upload vulnerability that can be exploited by attackers to upload...
Sourcecodester Vehicle Service Management System 代码问题漏洞
Sourcecodester Vehicle Service Management System is an open source PHP project. A simple web application for automotive repair/service stores or businesses. Sourcecodester Vehicle Service Management System suffers from a file upload vulnerability that can be exploited by attackers to upload...
Exploit for Unrestricted Upload of File with Dangerous Type in Embedthis Goahead
CVE-2021-42342 CVE-2021-42342 RCE POC1:just prints c in...
PT-2023-14714 · Debian · Debian
Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue involves multiple problems: Server Side Request Forgery SSRF, persistent Cross-site Scripting XSS, and a File upload vulnerability. SSRF allows an attacker to trick the server in...
Zoho ManageEngine ADManager Plus Arbitrary File Upload (CVE-2021-20130)
An unrestricted file upload vulnerability exists in ManageEngine ADManager Plus. The vulnerability is due to lack of validation of uploaded files in PasswordExpiryAction class...
Wiki.js 跨站脚本漏洞
Wiki.js is a suite of open source Wiki software based on Node.js and written in JavaScript by the Requarks.io team. Requarks Wiki.js suffers from a cross-site scripting vulnerability that stems from a script that uploads SVG files through a custom request using a forged MIME type. By creating a...
CVE-2021-23772 Arbitrary File Write
This affects all versions of package github.com/kataras/iris; all versions of package github.com/kataras/iris/v12. The unsafe handling of file names during upload using UploadFormFiles method may enable attackers to write to arbitrary locations outside the designated target folder...
CVE-2021-44159
4MOSAn GCB Doctor’s file upload function has improper user privilege control. A remote attacker can upload arbitrary files including webshell files without authentication and execute arbitrary code in order to perform arbitrary system operations or deny of service attack...
phpKF CMS 3.00 Beta y6 - Remote Code Execution (Unauthenticated) Exploit
Exploit Title: phpKF CMS 3.00 Beta y6 - Remote Code Execution RCE Unauthenticated Exploit Author: Halit AKAYDIN hLtAkydn Vendor Homepage: https://www.phpkf.com/ Software Link: https://www.phpkf.com/indirme.php Version: 3.00 Category: Webapps Tested on: Linux/Windows phpKF-CMS; It is a very popula...
OpenCats 代码问题漏洞
OpenCats is an open source recruitment process management system. OpenCATS prior to 0.9.6 was vulnerable to file uploads, which stemmed from a lack of valid validation of uploaded files in the application's lib/FileUtility.php. A remote attacker could exploit this vulnerability to execute arbitra...
Design/Logic Flaw
fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access...
CVE-2021-43117
The CVE-2021-43117 entry concerns fastadmin v1.2.1 and is linked to a file upload vulnerability that allows arbitrary code execution via shell access. The available connected sources corroborate the vulnerability in this specific version and describe the impact as remote arbitrary code execution....
CVE-2021-43117
fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access...
fastadmin 代码问题漏洞
fastadmin is a set of ThinkPHP and Bootstrap-based web backend development framework. fastadmin has a security vulnerability that stems from the fact that Fastadmin v1.2.1 is affected by a file upload vulnerability that allows execution of arbitrary code via shell access. No details of the...
Exploit for Unrestricted Upload of File with Dangerous Type in Apache Tomcat
CVE-2017-12617 CVE-2017-12617 is a critical vulnerability lea...
CVE-2021-27984
In Pluck-4.7.15 admin background a remote command execution vulnerability exists when uploading files...
CVE-2021-36719 Cybonet - PineApp
PineApp - Mail Secure - The attacker must be logged in as a user to the Pineapp system. The attacker exploits the vulnerable nicUpload.php file to upload a malicious file,Thus taking over the server and running remote code...
CVE-2021-27860 Arbitrary file upload vulnerability in FatPipe software
A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p92 and 10.2.2r44p1 allows a remote, unauthenticated attacker to upload a file to any location on the filesystem. The FatPipe advisory identifier for this vulnerability is FPSA006...