PT-2022-27702 · Classcms · Classcms

Name of the Vulnerable Software and Affected Versions: Classcms version 3.5 Description: The issue is related to an arbitrary file upload vulnerability in the file management function module. Recommendations: For Classcms version 3.5, consider restricting access to the file management function...

CVE-2022-45966: Unrestricted Upload of File with Dangerous Type

here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5...

CVE-2022-45966

CVE-2022-45966 affects ClassCMS 3.5, describing an arbitrary file upload vulnerability in the file management function/module. The issue is rooted in the file upload handling (improper validation/verification) and is rated CVSSv3.1 9.8 (Network, High privileges not required, no user interaction) ...

ClassCMS 代码问题漏洞

ClassCMS is a simple, flexible, secure and easy-to-expand content management system in China. A security vulnerability exists in ClassCMS version 3.5, which originates from an arbitrary file upload in the file management functional module...

Configuration Probing: Your Backups Might Be Your Greatest Weakness

Configuration files exist to make life easier for developers and website operators. In a world without configuration files, every instance of code that depended on a database connection could potentially require the connection details to be hard coded or manually entered. Other reusable data woul...

DedeCMS 安全漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A security vulnerability exists in...

CVE-2022-44118

dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution RCE via filemanagecontrol.php...

Webile 1.0.1 Directory Traversal

Document Title: =============== Webile v1.0.1 - Directory Traversal Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2320 Release Date: ============= 2022-10-10 Vulnerability Laboratory ID VL-ID: ==================================== 232...

CVE-2022-40921

DedeCMS V5.7.99 was discovered to contain an arbitrary file upload vulnerability via the component /dede/filemanagecontrol.php...

Desdev DedeCMS 代码问题漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. DedeCMS V5.7.99 version of a security...

Webile v1.0.1 - Directory Traversal Web Vulnerability

Document Title: =============== Webile v1.0.1 - Directory Traversal Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2320 Release Date: ============= 2022-10-09 Vulnerability Laboratory ID VL-ID: ==================================== 232...

Improper Name Validation in Upload Document Form

Description The name of any uploaded document can be manipulated using the destination parameter, to include new line characters in its name, breaking the execution of JS code in "New Documents" section from "Miscellaneous" menu, that will be blank until the document is removed from DB. Proof of...

CVE-2022-3124

The Frontend File Manager plugin for WordPress (versions before 21.3 ) is vulnerable to a flaw that allows unauthenticated users to rename uploaded files. Due to a lack of validation in the destination filename, an attacker can perform path traversal to change the content of arbitrary files on th...

CVE-2022-35239

The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier contains an insufficient verification vulnerability when uploading files. If this vulnerability is exploited, arbitrary PHP code may be executed if a remote authenticated...

CVE-2022-35239

The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier contains an insufficient verification vulnerability when uploading files. If this vulnerability is exploited, arbitrary PHP code may be executed if a remote authenticated...

CVE-2022-35239

CVE-2022-35239 affects SolarView Compact SV-CPT-MC310 and SV-CPT-MC310F (versions

PT-2022-22647 · Unknown · Solarview Compact Sv-Cpt-Mc310

Name of the Vulnerable Software and Affected Versions: SolarView Compact SV-CPT-MC310 versions 7.23 and earlier SolarView Compact SV-CPT-MC310F versions 7.23 and earlier Description: The image file management page contains an insufficient verification issue when uploading files. This can be...

PT-2022-18308 · Sourcecodester · Sourcecodester Simple Student Information System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Student Information System affected versions not specified Description: A critical issue affects the processing of the file manage course.php, where the manipulation of the id argument leads to sql injection. The attack...

Contec SolarView Compact 输入验证错误漏洞

Contec SolarView Compact is an application system from Contec Japan. which provides photovoltaic power measurement systems. Contec SolarView Compact suffers from an input validation error vulnerability that stems from insufficient input validation provided in the image file management page. An...

DEBIAN-CVE-2022-1141

Use after free in File Manager in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific user gesture...