Lucene search
+L

5508 matches found

zdt
zdt
added 2019/07/26 12:0 a.m.54 views

Ahsay Backup 7.x - 8.1.1.50 - Authenticated Arbitrary File Upload / Remote Code Execution Exploit (2

Exploit for jsp platform in category web applications Exploit Title: Authenticated insecure file upload and code execution flaw in Ahsay Backup v7.x - v8.1.1.50. Metasploit Date: 26-6-2019 Exploit Author: Wietse Boonstra Vendor Homepage: https://ahsay.com Software Link:...

9CVSS8.8AI score0.75171EPSS
SaveExploits10
CNVD
CNVD
added 2019/07/25 12:0 a.m.2 views

File Upload Vulnerability in UCMS Content Management System

UCMS is a simple open source content management system. UCMS content management system has a file upload vulnerability that can be exploited by attackers to gain server privileges...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2019/07/24 12:0 a.m.2 views

File Upload Vulnerability in ZZZCMS V1.7.2

zzcms is a free and open source building system, mainly facing the majority of webmasters to use. A file upload vulnerability exists in ZZZCMS V1.7.2. An attacker can exploit the vulnerability to obtain server privileges...

7AI score
SaveExploits0
CNVD
CNVD
added 2019/07/23 12:0 a.m.5 views

File Upload Vulnerability in PageAdmin CMS

PageAdmin CMS is a self-service website builder based on asp.net mvc development. PageAdmin CMS has a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2019/07/23 12:0 a.m.6 views

AKUVOX NETWORKS R50P VoIP phone file uploading

AKUVOX NETWORKS R50P VoIP phone is an IP phone from AKUVOX NETWORKS, China. A file upload vulnerability exists in the ringtone upload feature in AKUVOX NETWORKS R50P VoIP phone version 50.0.6.156, which can be exploited to upload script files due to a lack of file and path validation...

10CVSS7AI score0.02985EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/07/23 12:0 a.m.6 views

Unspecified Vulnerability in RANGER Studio Directus

RANGER Studio Directus is a set of open source headless CMS and API for managing custom databases from RANGER Studio, U.S.A. The Directus API is one of the components that can add a RESTful API layer to new or existing SQL databases. A security vulnerability exists in the RANGER Studio Directus 7...

8.8CVSS7.5AI score0.01608EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/07/18 12:0 a.m.4 views

File Upload Vulnerability in Website Management System of Kunshan Unicom Technology

Kunshan U-Net Information Technology Co., Ltd. is a website design company that integrates website construction with visual design development and brand online marketing promotion. A file upload vulnerability exists in the website management system of Kunshan YouNET Technology. An attacker can us...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2019/07/12 12:0 a.m.2 views

File upload vulnerability in Tongda OA 2015, 2016 Of***.php file

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. A file upload vulnerability exists in...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2019/07/10 12:0 a.m.2 views

File upload vulnerability in zzzcms V1.7.1 version

zzcms is an asp language development of the site building system. A file upload vulnerability exists in zzzcms V1.7.1, which can be exploited by attackers to gain control of the web server...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2019/07/10 12:0 a.m.5 views

File Upload Vulnerability in Qibo CMS System

Qibo CMS system is a content management system under Guangzhou Qibo Network Technology Co. There is a file upload vulnerability in the Qibo CMS system that can be exploited by attackers to gain control of the web server...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2019/07/08 12:0 a.m.3 views

File Upload Vulnerability in YFCMF Fi***.p*** Page

YFCMF is a backend content management framework using ThinkPHP 5.1. + foreign ACE 1.40 UI template. A file upload vulnerability exists in the YFCMF Fi.p page, which can be exploited by an attacker to gain server privileges...

7.2AI score
SaveExploits0
Prion
Prion
added 2019/07/05 8:15 p.m.19 views

Unrestricted file upload

BKS EBK Ethernet-Buskoppler Pro before 3.01 allows Unrestricted Upload of a File with a Dangerous Type...

10CVSS9.3AI score0.02197EPSS
SaveExploits3References2Affected Software1
CNVD
CNVD
added 2019/07/03 12:0 a.m.75 views

Linear eMerge 50P/5000P File Upload Vulnerability

The Linear eMerge 50P/5000P is an access control security system managed through a browser from Nortek Security & Control. A file upload vulnerability exists in the Linear eMerge 50P/5000P. An attacker could use this vulnerability to upload a file with an arbitrary extension to a directory in the...

10CVSS7.2AI score0.06477EPSS
SaveExploits5References1
CNVD
CNVD
added 2019/07/02 12:0 a.m.2 views

File Upload Vulnerability in PHPEMS v4.0

PHPEMS PHP Exam Management System online mock exam system based on PHP + Mysql development, is an open source and free PHP paperless mock exam system. PHPEMS v4.0 has a file upload vulnerability. An attacker can exploit this vulnerability to gain server privileges...

7.4AI score
SaveExploits0
CNVD
CNVD
added 2019/06/24 12:0 a.m.2 views

File Upload Vulnerability in PageAdminCMS

PageAdmin Cms is a self-help website building system based on asp.net mvc development. PageAdminCMS has a file upload vulnerability that can be exploited by attackers to gain server privileges...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2019/06/24 12:0 a.m.2 views

File Upload Vulnerability in ITtools

ITtools is an information technology teaching aid platform developed by Mr. Chen Bin's team at the Second Middle School in Wenling City, Zhejiang Province. ITtools has a file upload vulnerability that can be exploited by an attacker to gain server privileges...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2019/06/19 12:0 a.m.2 views

File upload vulnerability in the background ap***_co***.php file of PHPOK enterprise website building system

PHPOK is a set of enterprise station CMS system developed in PHP + MYSQL language. A file upload vulnerability exists in the apco.php file in the background of the PHPOK enterprise website system. Remote attackers can use this vulnerability to obtain server administrative privileges...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2019/06/04 12:0 a.m.4 views

File Upload Vulnerability in OpenSNS

OpenSNS is a lightweight social user center framework based on OneThink. The system adheres to a minimalist design style and focuses on communication. A file upload vulnerability exists in OpenSNS. The vulnerability is due to the program when uploading zip files, automatically decompress the zip...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2019/06/04 12:0 a.m.5 views

IBM Intelligent Operations Center and IBM Water Operations for Waternamics File Upload Vulnerability

IBM Intelligent Operations Center IOC and IBM Water Operations for Waternamics are both products of IBM Corporation, U.S.A. IBM Intelligent Operations Center is a suite of city operations solutions. IBM Intelligent Operations Center is a suite of city operations solutions with features such as da...

8.8CVSS6.9AI score0.0143EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/05/28 12:0 a.m.4 views

File upload vulnerability in ourphp

OurPHP is a web content management system developed using the PHP language. A file upload vulnerability exists in ourphp, which can be exploited by attackers to gain server privileges...

7.3AI score
SaveExploits0
Rows per page
Query Builder