File Upload Vulnerability in Shipping 100 Virtual Goods Autoship System

Shipping 100 Virtual Goods Autoship System is a virtual goods autoship system/article pay to read system. A file upload vulnerability exists in the Ship 100 Virtual Goods Autoship System. An attacker can exploit this vulnerability to gain server privileges...

Visualware MyConnection Server File Upload Vulnerability

Visualware MyConnection Server is a software application from Visualware, Inc. Providing accurate measurements of network quality and performance ensures a great user experience. A file upload vulnerability exists in Visualware MyConnection Server 11.0b build 5382 and prior versions, which...

File upload vulnerability in kitecms backend

KiteCMS open source web content management system CMS, the system is based on the framework ThinkPHP 5.1. version of the development, applicable to individuals and enterprises to quickly build a station and development needs. kitecms backend file upload vulnerability , attackers can exploit the...

Niushop open source mall file upload vulnerability

Niushop open source mall is a PHP open source mall system . Niushop open source mall file upload vulnerability , an attacker can use this vulnerability to obtain server control privileges...

File Upload Vulnerability in OurPHP Admin Backend

OurPHP is a PHP MySQL-based development of W3C-compliant site-building system. A file upload vulnerability exists in the administrative backend of OurPHP, which allows attackers to gain control of the web server...

Simple Employee Records System 1.0 Shell Upload

Exploit Title: Simple Employee Records System - File Upload RCE Unauthenticated Date: 2021-02-25 Exploit Author: [email protected] Vendor Homepage: https://www.sourcecodester.com/php/11393/employee-records-system.html Software Link:...

File Upload Vulnerability in Sichuan Situzhi Travel Software Co.

Sichuan Situzhi Travel Software Co., Ltd. is a company focusing on providing digitalization, informatization and intelligence services for the development of intelligent tourism in the whole region. A file upload vulnerability exists in the website building system of Sichuan Situo Intelligent...

Simple Employee Records System 1.0 - File Upload RCE (Unauthenticated)

Exploit Title: Simple Employee Records System 1.0 - File Upload RCE Unauthenticated Date: 2021-02-25 Exploit Author: [email protected] Vendor Homepage: https://www.sourcecodester.com/php/11393/employee-records-system.html Software Link:...

File uploading loophole in intelligent management service platform for official vehicles

Founded in October 2007, China Telecom Hongxin Information Technology Co., Ltd. is a wholly-owned subsidiary of China Telecom Group with independent legal personality. The company is based on SDICT comprehensive intelligent information service provider. A file upload vulnerability exists in the...

Exploit for Path Traversal in Vmware Cloud_Foundation

CVE-2021-21972 Vulnerability Description CVE-2021-21972:...

File Upload Vulnerability in the Cloud Platform of Teaching Video Application of Guangzhou Aoweiya Electronic Technology Co.

Teaching video application cloud platform is based on the background of the current educational video resources construction and user demand research, developed to adapt to the development of the times and meet the needs of the school, with the effectiveness, multi-functional, distinctive feature...

File upload vulnerability in waychar enrollment system (CNVD-2021-16014)

The waychar registration system is a tournament official website deployment service that enables one-stop deployment of official websites. A file upload vulnerability exists in the waychar registration system, which can be exploited by an attacker to gain server control privileges...

CVE-2021-3120

An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allows remote attackers to achieve remote code execution on the operating system in the security context of the web server. In order to exploit this vulnerability, an attacker must ...

Design/Logic Flaw

An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allows remote attackers to achieve remote code execution on the operating system in the security context of the web server. In order to exploit this vulnerability, an attacker must ...

File Upload Vulnerability in ECM Collaboration Management Platform

Micro macro ECM collaborative office OA and collaborative management platform is to enhance enterprise execution, creativity, learning, cohesion, control, decision-making, resilience of the seven forces of collaboration as the goal, to meet the enterprise personalized, refined, mobile management...

File Upload Vulnerability in VisualField SC***.exe Component at Zhejiang ZDZ Information Technology Co.

VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. A file upload vulnerability exists in the VisualField SC.exe component of Zhejiang ZDAC Information Technology Co. Ltd, which can be exploited by an attacker to...

CVE-2021-25780

CVE-2021-25780 affects Baby Care System 1.0. The vulnerability is an arbitrary file upload in posts.php that allows uploading content (including PHP files) to the server, enabling command execution and a shell. The available documents confirm the vulnerable component (posts.php) and the impact (r...

Sourcecodester Baby Care System 代码问题漏洞

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. It provides a baby care system. Sourcecodester Baby Care System is vulnerable to a file upload vulnerability that could be exploited by an attacker to cause execution of commands and gain contr...

File Upload Vulnerability in Xunrui CMS

CMS is a content management framework based on CodeIgniter4. A file upload vulnerability exists in XunRui CMS. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

Chengdu Zero Takeoff Network 07FLY-CRM V1 Exists File Upload Vulnerability

07FLY-CRM is zero take-off network development , based on the GPLv3 agreement issued for small and medium-sized management activities , to provide customer relationship management CRM, sales and marketing inventory JXC, human resources HRM, logistics office supplies, fixed assets, public...