GHSA-RC8Q-45V8-X6XC Path Disclosure within joomla/filesystem class

An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Uploading a file name of an excess length causes the error. This error brings up the screen with the path of the source code of the web application...

LimeSurvey 跨站脚本漏洞

LimeSurvey formerly known as PHPSurveyor is an open source online survey program from the LimeSurvey Limesurvey team that supports survey development, survey distribution, and data collection.LimeSurvey is vulnerable to a cross-site scripting vulnerability that originates in LimeSurvey 3.x- The...

WordPress plugin code issue vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . A code issue vulnerability exists in Kaswara Modern VC...

CVE-2020-28063

A file upload issue exists in all versions of ArticleCMS which allows malicious users to getshell...

Unrestricted file upload

A file upload issue exists in all versions of ArticleCMS which allows malicious users to getshell...

CVE-2020-28063

A file upload issue exists in all versions of ArticleCMS which allows malicious users to getshell...

File Upload Vulnerability in Super cms v2.39 (CNVD-2021-32174)

Super CMS content management system by the SEO Research Center moonseo.cn in order to solve the problem of website optimization and research and development of a set of products, this product adopts an object-oriented approach to independent research and development of the MVC framework...

File upload vulnerability in duxcms

duxcms is a web content management based on HMVC rules and developed in PHP for SMEs, companies, news, individuals and other related industries. A file upload vulnerability exists in duxcms, which can be exploited by attackers to obtain server administrative privileges...

CVE-2020-13774

CVE-2020-13774 – Ivanti Endpoint Manager is affected by an unrestricted file-upload flaw in EditLaunchPadDialog.aspx, impacting 2019.1 and 2020.1. The issue stems from insufficient file-extension validation and insecure file operations on uploaded images, allowing an authenticated attacker to upl...

CVE-2020-27386

An unrestricted file upload issue in FlexDotnetCMS before v1.5.9 allows an authenticated remote attacker to upload and execute arbitrary files by using the FileManager to upload malicious code e.g., ASP code in the form of a safe file type e.g., a TXT file, and then using the FileEditor in v1.5.8...

EUVD-2020-22065

An uncontrolled resource consumption vulnerability in Palo Alto Networks PAN-OS allows for a remote unauthenticated user to upload temporary files through the management web interface that are not properly deleted after the request is finished. It is possible for an attacker to disrupt the...

Design/Logic Flaw

An arbitrary file upload issue exists in Mara CMS 7.5. In order to exploit this, an attacker must have a valid authenticated admin/manager session and make a codebase/dir.php?type=filenew request to upload PHP code to codebase/handler.php...

PT-2020-13261 · Comodo +1 · Itop +1

Name of the Vulnerable Software and Affected Versions: Combodo iTop affected versions not specified Description: The issue is related to a stored Cross-site Scripting vulnerability. This can be exploited by uploading a file that contains a malicious script. Recommendations: At the moment, there i...

Manolo GWTUpload Code Issue Vulnerability

Manolo GWTUpload is a library based on HTML and JavaScript , it is mainly used to upload files to a Web server . A security vulnerability exists in server/UploadServlet.java the servlet that handles file uploads in Manolo GWTUpload version 1.0.3. An attacker can exploit this vulnerability with th...

SUSE-SU-2020:0658-1 Security update for php5

This update for php5 fixes the following issues: - CVE-2020-7062: Fixed a null pointer dereference when using file upload functionality under specific circumstances bsc1165280. - CVE-2020-7063: Fixed an issue where adding files change the permissions to default bsc1165289...

Unrestricted file upload

A file upload issue exists in the specid parameter in Thomson Reuters FATCH before 5.2, which allows malicious users to upload arbitrary PHP files to the web root and execute system commands...

CVE-2015-4553

A file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell...

CVE-2015-5951

Thomson Reuters FATCA Arbitrary File Upload (CVE-2015-5951) is documented in multiple sources. Affected software: Thomson Reuters FATCA below version 5.2. The vulnerability arises from an arbitrary file upload via the specid parameter, enabling upload of PHP scripts to the web root and potential ...

USN-3627-1 apache2 vulnerabilities

Alex Nichols and Jakob Hirsch discovered that the Apache HTTP Server modauthnzldap module incorrectly handled missing charset encoding headers. A remote attacker could possibly use this issue to cause the server to crash, resulting in a denial of service. CVE-2017-15710 Elar Lang discovered that...

Unable to upload a file to an internal webpage using Secure Web

XenMobile 10.x Secure Web 10.x iOS 10.x User able to access the upload site, however, upload never completes successfully w/ no error or other notification. Behavior doesn't occur when attempting same on an Android device...