File Upload Vulnerability in JTBC Web Content Management System (PHP) at Shanghai SevenWise Network Technology Co.

JTBC Web Content Management System PHP is a website system that can expand and clone existing modules. Ltd. JTBC Web Content Management System PHP has a file upload vulnerability that can be exploited by attackers to gain control of the server...

Zebra Technologies FX9500 代码问题漏洞

The Zebra Technologies FX9500 formerly known as the Motorola FX9500 is an industrial-grade fixed RFID Radio Frequency Identification reader from Zebra Technologies, Inc. The Zebra Fixed RFID Reader FX9500 is vulnerable to a code issue. The vulnerability stems from the fact that an unauthenticated...

File Upload Vulnerability in Lionfish Merchant Management System

Xiamen Lionfish Network Technology Co., Ltd. is an Internet innovation model software products and solutions as the core, mainly focusing on e-commerce system development and business solutions for high-tech enterprises. A file upload vulnerability exists in the Lionfish Merchant Management Syste...

CVE-2021-23014

On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, and 14.1.x before 14.1.4, BIG-IP Advanced WAF and ASM are missing authorization checks for file uploads to a specific directory within the REST API which might allow Authenticated users with guest privileges to upload files. Note: Software...

File upload vulnerability in Catfish Blog V3.9.0 backend (CNVD-2021-37306)

Catfish Blog is an open source free PHP blog. A file upload vulnerability exists in the backend of Catfish Blog V3.9.0, which can be exploited by an attacker to gain control of the server...

Catfish Blog V3.9.0 File Upload Vulnerability in Backend

Catfish Blog is an open source free PHP blog. A file upload vulnerability exists in the backend of Catfish Blog V3.9.0, which can be exploited by an attacker to gain control of the server...

Catfish CMS suffers from a file upload vulnerability

Catfish CMS is a free and open source PHP content management system. Catfish CMS has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

File Upload Vulnerability in Ke Xun Web-based Marking System

Anhui Kexun Education Equipment Co., Ltd. is mainly engaged in campus card, intelligent campus, intelligent campus information system, library self-borrowing and returning. A file upload vulnerability exists in Kexun's web-based marking system, which can be exploited by attackers to obtain server...

File upload vulnerability exists in RGCMS (CNVD-2021-35776)

RGCMS is an open source building management system. RGCMS has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Cisco HyperFlex HX Data Platform Access Control Error Vulnerability

Cisco HyperFlex HX Data Platform is a network appliance from Cisco USA. Provides enterprise-class agility, scalability, security and lifecycle management capabilities. An access control error vulnerability exists in Cisco HyperFlex HX Data Platform, which can be exploited by an attacker to upload...

CVE-2021-1499

A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to upload files to an affected device. This vulnerability is due to missing authentication for the upload function. An attacker could exploit this vulnerabilit...

CVE-2020-19113

Arbitrary File Upload vulnerability in Online Book Store v1.0 in adminadd.php, which may lead to remote code execution...

File Upload Vulnerability in Dahua In-vehicle Integrated Management Platform of Zhejiang Dahua Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A file upload vulnerability exists in the Dahua vehicle integrated management platform of Zhejiang Dahua Technology Co. An attacker can exploit the vulnerability to upload a...

File Upload Vulnerability in Dahua In-vehicle Integrated Management Platform of Zhejiang Dahua Technology Co.(CNVD-2021-35890)

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A file upload vulnerability exists in the Dahua vehicle integrated management platform of Zhejiang Dahua Technology Co. An attacker can exploit the vulnerability to upload a...

CVE-2021-24252

The CVE-2021-24252 issue affects the WordPress Event Banner plugin prior to v1.4. The vulnerability arises because uploaded images are not verified, enabling admin users to upload arbitrary files (e.g., .exe, .php) that can lead to remote code execution (RCE). The flaw is aggravated by the absenc...

File Upload Vulnerability in Concrete Friends Concrete Enterprise Management System

Hunan AOKE Network Technology Co., Ltd. was founded in 2011, located in Changsha, Hunan Province, the capital of construction machinery, is China's concrete enterprise informatization solution provider. A file upload vulnerability exists in the concrete enterprise management system of concrete...

Cisco HyperFlex HX Data Platform 访问控制错误漏洞

Cisco HyperFlex HX Data Platform is a network appliance from Cisco USA. Provides enterprise-class agility, scalability, security and lifecycle management capabilities. An access control error vulnerability exists in Cisco HyperFlex HX Data Platform, which can be exploited by an attacker to upload...

File Upload Vulnerability in SEMCMS PHP (Multilingual) Version

SemCms is an open source foreign trade enterprise website management system. A file upload vulnerability exists in the PHP multilingual version of SEMCMS. An attacker can exploit the vulnerability to upload webshell and gain server privileges...

file upload vulnerability in semcms PHP version 2.0 backend

SemCms is a set of open source foreign trade enterprise website management system, mainly for foreign trade enterprises, compatible with IE, Firefox, google, 360 and other mainstream browsers semcms foreign trade website PHP version 2.0 background file upload vulnerability , attackers can use the...

File upload vulnerability in ClassCMS backend (CNVD-2021-35844)

ClassCMS is a content management system. A file upload vulnerability exists in the ClassCMS backend. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...