File upload vulnerability in PHPOK backend

PHPOK is a set of enterprise website system developed in PHP + MYSQL language. A file upload vulnerability exists in the PHPOK backend. An attacker can exploit the vulnerability to upload webshell and gain server privileges...

File upload vulnerability in XHCMS backend (CNVD-2021-34276)

XHCMS is a general-purpose cms system generated based on xhadmin, which supports full-site staticization. A file upload vulnerability exists in the background of XHCMS. Attackers can use this vulnerability to obtain server control privileges...

File upload vulnerability exists in WeCenter of Shenzhen Weik Interactive Co.(CNVD-2021-34219)

WeCenter is a php question and answer system developed in PHP MySQL. A file upload vulnerability exists in WeCenter by Shenzhen Weik Interactive Co. An attacker can use this vulnerability to overwrite server files to gain control of the server...

File Upload Vulnerability in WVJT Exam Platform

Ltd. is an advocate of computer-aided assessment and examination technology in China, specializing in the field of assessment and examination. A file upload vulnerability exists in the W3C test platform, which can be exploited by attackers to gain control of the server...

CatfishCMS suffers from a file upload vulnerability (CNVD-2021-33399)

CatfishCMS is a free and open source PHP content management system. CatfishCMS suffers from a file upload vulnerability that can be exploited by attackers to gain control of the server...

File Upload Vulnerability in Digital Production Management System of Weihang Haojian Technology (Shenzhen) Co.

Weihang Haojian Technology Shenzhen Co., Ltd. is a pure software enterprise focusing on the research and development and promotion of the application of graphic technology and intelligent informatization software products, which integrates scientific research, development, sales, consulting and...

File Upload Vulnerability in FineReport of SailSoft Software Ltd.

FineReport is the leading enterprise-class Web reporting tool. A file upload vulnerability exists in FineReport from SailSoft Software Ltd. that can be exploited by an attacker to upload arbitrary files...

Cross site scripting

The Import function in MintHCM RELEASE 3.0.8 allows an attacker to execute a cross-site scripting XSS payload in file-upload...

File Upload Vulnerability in Zhongke Yunlian ERP System

Ltd. is a limited company with CloudLink POS-ERP management system and FoodMaker restaurant management system as its main business. A file upload vulnerability exists in Zhongke Yunlian ERP system, which can be exploited by attackers to gain control of the server...

Textpattern CMS suffers from a file upload vulnerability (CNVD-2021-34232)

Textpattern CMS is a free open source content management system based on PHP and MySQL. An arbitrary file upload vulnerability exists in Textpattern CMS version 4.8.5, which can be exploited by an attacker to gain control of the server...

File Upload Vulnerability in Everlab-Catalog Distributor Management Backend of Beijing Kubaza Information Technology Co.

Beijing Cobazaar Information Technology Co., Ltd. is a high-tech enterprise specializing in network software development and services. Beijing Cobazaar Information Technology Co., Ltd. has a file upload vulnerability in its Everlab-Catalog reseller management backend that can be exploited by an...

Extreme CMS suffers from a file upload vulnerability (CNVD-2021-34464)

Extreme CMS is an open source and free CMS web content management system in PHP language. A file upload vulnerability exists in Extreme CMS 1.9.4, which can be exploited by attackers to upload arbitrary files and gain server privileges...

File Upload Vulnerability in Flash Flood Monitoring and Early Warning System of Fujian SiChuang Software Co.

Fujian SiChuang Software Co., Ltd. is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. It specializes in providing disaster prevention and mitigation emergency command system solutions for the government, disaster prevention and mitigation...

File Upload Vulnerability in School Training and Teaching Management System of Nanjing Suwen Software Technology Co.

Nanjing Suwen Software Technology Co., Ltd. was formerly known as the software studio established in 2001 in Gulou District, Nanjing, 2002, the studio began to involve in the performance management system, course selection management system, faculty management system development and design, in...

File Upload Vulnerability in Panavision OA

Panavision OA E-Office is a standard version of the Panavision collaborative office system program released by Shanghai Panavision Network Technology Co. A file upload vulnerability exists in E-Office. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

File Upload Vulnerability in OfficeWeb365 of Xi'an Daxi Information Technology Co.

OfficeWeb365 focuses on Office document online preview and PDF document online preview cloud services, including Microsoft Word document online preview, Excel table online preview, Powerpoint presentation document online preview, WPS word processing, WPS forms, WPS presentations and Adobe PDF...

File Upload Vulnerability in e-office Panmicro Collaboration Office System

e-cology is a collaborative business platform with enterprise information portal, knowledge management, data center, workflow management, human resource management, customer and partner management, project management, financial management, and asset management functions. A file upload vulnerabili...

File Upload Vulnerability in Website Building System of Shandong Guozi Software Co.

Shandong Guozi Software Co., Ltd. is a professional application software product development and industry solution provider. A file upload vulnerability exists in the website builder system of Shandong Guozi Software Co. Ltd, which can be exploited by attackers to gain control of the server...

Hebei Nanhao High-tech Development Co., Ltd. online marking system has a file upload vulnerability

Online marking system is an online marking system developed by Hebei Nanhao High-tech Development Co. There is a file upload vulnerability in the online marking system of Hebei Nanhao High-Tech Development Co., Ltd. that can be exploited by attackers to obtain server control privileges...

File Upload Vulnerability in Easy Tender's Corporate Bidding and Procurement Platform

Shanghai Huizhao Information Technology Co., Ltd. is a comprehensive service provider of electronic bidding system, specializing in the provision of electronic bidding software development and trading platform operation and other services. A file upload vulnerability exists in the E-Tendering...