5509 matches found
File Upload Vulnerability in Library Cluster Management System of Guangzhou Tutron Computer Software Development Co. Ltd (CNVD-2021-52386)
Ltd. is a high-tech enterprise integrating product research and development, application integration and customer service, with the main goal of providing high-quality application software system design, integration and maintenance services for users in the library industry. There is a file uploa...
Shaanxi Silicon Peak Network Technology Co., Ltd. website building system has file upload vulnerability
Shaanxi Silicon Peak Network Technology Co., Ltd. was founded in 2007 is a "website design, software development, microblogging, Internet marketing, e-commerce" and other integrated information technology services in one of the high-end brand IT organizations. Shaanxi Silicon Peak Network...
Online Covid Vaccination Scheduler System 1.0 - Arbitrary File Upload to Remote Code Execution
Exploit Title: Online Covid Vaccination Scheduler System 1.0 - Arbitrary File Upload to Remote Code Execution Unauthenticated Exploit Author: faisalfs10x Vendor Homepage: https://www.sourcecodester.com/ Software Link:...
File Upload Vulnerability in TaoLer
TaoLer is a simple and fast lightweight forum system for individuals or organizations to exchange information on a regional basis. A file upload vulnerability exists in TaoLer, which can be exploited by an attacker to gain control of the server...
File upload vulnerability in county-level flash flood monitoring and early warning system of Suzhou Mengtu Geographic Information System Co., Ltd (CNVD-2021-51387)
Suzhou Mengtu Geographic Information System Limited Liability Company is a high-tech company specializing in the research and development of geographic information system platform and the development of industry application software. Suzhou Mengtu Geographic Information System Limited Liability...
Church Management System 1.0 Shell Upload
Exploit Title: Church Management System 1.0 - Unrestricted File Upload to Remote Code Execution Authenticated Date: 07/03/2021 Exploit Author: Murat DEMIRCI @butterflyhunt3r Vendor Homepage: https://www.sourcecodester.com Software Link:...
File Upload Vulnerability in Exam Hall Management System
Exam Hall Management System is a PHP project that automates the process of exam assignment and seating arrangements. A file upload vulnerability exists in Exam Hall Management System, which can be exploited by an attacker to upload a webshell and gain server privileges...
File Upload Vulnerability in Fisheye CMS (CNVD-2021-51875)
FishLeap CMS is a content management system specifically geared towards enterprise applications. A file upload vulnerability exists in Fishy CMS, which can be exploited by an attacker to write a malicious file to gain server control privileges...
File Upload Vulnerability in Beijing Bolehoo Technology Co.
Beijing Bleihoo Technology Co., Ltd. is a planning, design, production, technology development in one of the oldest website building company. A file upload vulnerability exists in the website building system of Beijing Bleihoo Technology Co., Ltd, which can be exploited by attackers to gain contr...
File Upload Vulnerability in e-office of Shanghai Panavision Network Technology Co.
Panmicro e-office system is a professional collaborative OA software. A file upload vulnerability exists in e-office of Shanghai Panmicro Network Technology Co. Ltd, which can be exploited by an attacker to gain control of the server...
Machform Remote Code Execution Vulnerability
MachForm is an HTML form builder that lets you create contact forms, surveys, order forms or any other web form without writing code. A remote code execution vulnerability exists in versions prior to Machform 16. The vulnerability stems from insufficient validation of file attachments uploaded wi...
CVE-2021-20103
MachForm prior to version 16 is affected by a stored cross-site scripting vulnerability due to insufficient sanitization of file attachments uploaded with forms via upload.php. The root cause is inadequate validation/sanitization of attachments, allowing injected JavaScript to be stored and poten...
Super Progressive Web Apps < 2.1.13 - Authenticated (High Privileged) Arbitrary File Upload to RCE
When the Apple Touch Icons & Splash Screen add-on is active, its superpwasplashscreenuploader AJAX action, did not properly check for authorisation and the content of the uploaded archive file. This allows high privilege users admin+ to upload an archive with a PHP file, leading to RCE. v2.1.12...
Super Progressive Web Apps < 2.1.12 - Authenticated (Low Privileged) Arbitrary File Upload to RCE
When the Apple Touch Icons & Splash Screen add-on is active, its superpwasplashscreenuploader AJAX action, does not properly check for CSRF, authorisation and the content of the uploaded archive file. This allows attackers to upload an archive with a PHP file, leading to RCE by either using a low...
File upload vulnerability exists in Panavision e-office (CNVD-2021-49104)
Panmicro e-office is a standard collaborative mobile office platform under Panmicro. A file upload vulnerability exists in Panmicro e-office, which can be exploited by an attacker to gain control of the server...
Pandora FMS Arbitrary File Upload Vulnerability
Pandora FMS is a monitoring system from Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. An arbitrary file upload vulnerability exists in Pandora FMS 754 and earlier versions. The vulnerability can be exploited for remote...
Lightweight Facebook-Styled Blog Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Lightweight facebook-styled blog authenticated remote code execution", 'Description' = %q This module exploits the file upload vulnerability of...
Lightweight facebook-styled blog 1.3 - Remote Code Execution (RCE) (Authenticated) (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Lightweight facebook-styled blog authenticated remote code execution", 'Description' = %q This module exploits the file upload vulnerability of...
Lightweight facebook-styled blog Authenticated Remote Command Execution Exploit
This module exploits the file upload vulnerability of Lightweight self-hosted facebook-styled PHP blog and allows remote code execution This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Lightweig...
