CVE-2020-24407

Magento versions 2.4.0 and 2.3.5p1 and earlier are affected by an unsafe file upload vulnerability that could result in arbitrary code execution. This vulnerability could be abused by authenticated users with administrative permissions to the System/Data and Transfer/Import components...

File Upload Vulnerability in easySite Content Management System

CSCL is a provider of artificial intelligence technology and informatization software and platforms. A file upload vulnerability exists in easySite Content Management System, which can be exploited by attackers to gain control of the server...

File upload vulnerability in MCms backend of Jiangxi Minsoft Technology Co.

Jiangxi Minsoft Technology Co., Ltd. business scope includes: information technology consulting services; Internet information services; computer software technology development and so on. Jiangxi Minsoft Technology Co., Ltd. MCms background file upload vulnerability, attackers can use the...

File Upload Vulnerability in Microconsultation Communication System of Beijing Zhongwang Network Technology Co.

Founded in 2010 and headquartered in Beijing Zhongguancun Science and Technology Park, Beijing Zhongwang Network Technology Co., Ltd. is a high-tech enterprise dedicated to the research, development and innovation of multimedia communication technology. A file upload vulnerability exists in Beiji...

File upload vulnerability in MCms backend of Jiangxi Minsoft Technology Co. Ltd (CNVD-2020-64532)

Jiangxi Minsoft Technology Co., Ltd. business scope includes: information technology consulting services; Internet information services; computer software technology development and so on. Jiangxi Minsoft Technology Co., Ltd. MCms background file upload vulnerability, attackers can use the...

Augmented Reality <= 1.2.0 - Unauthenticated PHP File Upload leading to RCE

The elFinder connector used allows upload of PHP files as the 'uploadAllow' options contains 'text/x-php'. This allows an unauthenticated user to upload PHP files, leading to a RCE vulnerability. The issue is similar to https://wpscan.com/vulnerability/10389 POST...

File Upload Vulnerability in BladeKeeper Website Building System V1.0

Knife building system is specifically for software developers and software affiliates of the software publishing platform for self-service website building system. A file upload vulnerability exists in KnifeBuilder V1.0, which allows an attacker to upload a webshell to a server by uploading...

Kaixin Electronic Document Inventory in File Upload Vulnerability

Qixing electronic document library can be used to store departmental manuals, system specifications, mechanical drawings and other edoc. The Qixing Electronic Document Library suffers from a file upload vulnerability, which can be exploited by an attacker to upload a malicious file and take contr...

File Upload Vulnerability in SIYUCMS V6.1

SIYUCMS is a content management system based on ThinkPHP + AdminLTE. A file upload vulnerability exists in SIYUCMS V6.1, which can be exploited by an attacker to gain administrative privileges on the web server...

File Upload Vulnerability in Kaixin Procurement System

Qixing Purchasing System is a system for material purchasing and management, which is developed using ASP.NET language. A file upload vulnerability exists in the Qixing Procurement System. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

File Upload Vulnerability in Laiku Push Mall System (CNVD-2020-62378)

Laikepush mall system is a system with independent copyright, is an integrated e-commerce system all the functions of the platform. A file upload vulnerability exists in the Laikipu Mall System, which can be exploited by attackers to upload remote files to the server and realize getshell...

File upload vulnerability in ShopXO Pl***.php file

ShopXO is an open source enterprise-level open source e-commerce system. A file upload vulnerability exists in the ShopXO Pl.php file. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

File upload vulnerability in ShopXO Pa***.php file

ShopXO is an open source enterprise-level open source e-commerce system. A file upload vulnerability exists in the ShopXO Pa.php file. An attacker can exploit the vulnerability to upload webshell and gain server privileges...

File upload vulnerability in ShopXO backend (CNVD-2020-61907)

ShopXO is an open source PHP e-commerce system. There is a file upload vulnerability in the ShopXO backend that can be exploited by an attacker to gain access to the site's administrative privileges...

ZZCMS suffers from a file upload vulnerability (CNVD-2020-59410)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to gain control of the server...

File Upload Vulnerability in YouDianCMS v9.0

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS v9.0 has a file upload vulnerability, which can be exploited by attackers to gain...

File Upload Vulnerability in Shenzhen Bangming Technology Co.

Build Manager is a multi-language enterprise website building system. There is a file upload vulnerability in Shenzhen Bangming Technology Co. Attackers can use this vulnerability to obtain server privileges...

File upload vulnerability in TWCMS backend se***_co***.cl***.php file

TWCMS Tong Wang CMS is an enterprise website CMS system. A file upload vulnerability exists in the seco.cl.php file in the background of TWCMS. An attacker can exploit the vulnerability to write arbitrary files and gain server privileges...

File Upload Vulnerability in FastAdmin Fileix File Manager Backend

FastAdmin Fileix file manager is webix based file manager build, Fileix has an intuitive interface that allows you to work with any of your files or folders. A file upload vulnerability exists in the backend of FastAdmin Fileix File Manager. An attacker can exploit this vulnerability to upload...

File Upload Vulnerability in Fishy CMS Backend Data Backup Branch

FishLeap CMS is a content management system specifically geared towards enterprise applications. A file upload vulnerability exists in the backend data backup of Fishy CMS. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...