5510 matches found
CVE-2024-27665
CVE-2024-27665 affects Unifiedtransform v2.X, with a Stored Cross-Site Scripting (XSS) vulnerability via the Syllabus module’s file upload feature. The Red Hat/NVD/CVE records confirm the XSS flaw; PT-Security describes the issue for Unifiedtransform v2.X and notes a lack of public technical deta...
CVE-2024-3444
The CVE-2024-3444 issue affects Wangshen SecGate 3600 up to 20240408. The vulnerability resides in an upload endpoint parameter, specifically the file path parameter /?g=net_pro_keyword_import_save with the reqfile argument, where manipulation leads to unrestricted file upload. It is exploitable ...
Simple Car Rental System 代码问题漏洞
Simple Car Rental System is a simple car rental application. A code issue vulnerability exists in version 1.0 of Simple Car Rental System due to a file upload vulnerability in the parameter Upload Image of the file add-vehicle.php...
PT-2024-23631 · Unknown · Sourcecodester Complete E-Commerce Site
Name of the Vulnerable Software and Affected Versions: Sourcecodester Complete E-Commerce Site version 1.0 Description: The issue allows remote attackers to execute arbitrary code via the filename parameter in the "admin/products photo.php" endpoint. This is an arbitrary file upload vulnerability...
E-Commerce Site 安全漏洞
E-Commerce Site is an e-commerce website. A security vulnerability exists in Sourcecodester Complete E-Commerce Site v1.0, which stems from an arbitrary file upload vulnerability that can be exploited by an attacker to execute arbitrary code via the filename parameter in admin/productsphoto.php...
CVE-2024-31210 PHP file upload bypass via Plugin installer
WordPress is an open publishing platform for the Web. It's possible for a file of a type other than a zip file to be submitted as a new plugin by an administrative user on the Plugins - Add New - Upload Plugin screen in WordPress. If FTP credentials are requested for installation in order to move...
CVE-2024-28520
CVE-2024-28520 is a file upload vulnerability in Byzoro Networks’ Smart multi-service security gateway intelligent management platform, version S210. The issue stems from the uploadfile.php component, enabling an attacker to obtain sensitive information. The vulnerability has a CVSSv3.1 vector of...
Wordpress Plugin - Membership For WooCommerce < v2.1.7 - Arbitrary File Upload to Shell (Unauthenticated)
Exploit Title: Wordpress Plugin - Membership For WooCommerce Resultz Uploader Uploaded ?PHP...
CVE-2024-31114
CVE-2024-31114 concerns the WordPress plugin group “Shortcode Addons” (Shortcode Addons: from n/a through 3.2.5). The connected exploit document confirms concrete technical details: an authenticated attacker with administrator-level access can abuse a missing file-type validation to perform an ar...
CVE-2023-46808
An file upload vulnerability in Ivanti ITSM before 2023.4, allows an authenticated remote user to perform file writes to the server. Successful exploitation may lead to execution of commands in the context of non-root user...
CVE-2023-46808
An file upload vulnerability in Ivanti ITSM before 2023.4, allows an authenticated remote user to perform file writes to the server. Successful exploitation may lead to execution of commands in the context of non-root user...
YouDianCMS 代码问题漏洞
YouDianCMS is a website CMS. YouDianCMS 9.5.12 and earlier versions have a code issue vulnerability that stems from a file upload vulnerability in the parameter file of the file AppLibActionAdminChannelAction.class.php...
EUVD-2023-51963
Unrestricted Upload of File with Dangerous Type vulnerability in WEN Solutions WP Child Theme Generator.This issue affects WP Child Theme Generator: from n/a through 1.0.9...
CVE-2023-48275 WordPress Widgets for Google Reviews plugin <= 11.0.2 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in Trustindex.Io Widgets for Google Reviews.This issue affects Widgets for Google Reviews: from n/a through 11.0.2...
CVE-2023-47873 WordPress WP Child Theme Generator plugin <= 1.0.9 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in WEN Solutions WP Child Theme Generator.This issue affects WP Child Theme Generator: from n/a through 1.0.9...
CVE-2023-47873
The CVE-2023-47873 entry corresponds to the WordPress WP Child Theme Generator plugin =1.1.3) to mitigate.
magicflue file upload vulnerability
magicflue is a digital nervous system of China magicflue company, which can support the integration of complex business scenarios and complex IT environment without code platform. A file upload vulnerability exists in magicflue, which can be exploited by an attacker to execute arbitrary code via ...
Exploit for Unrestricted Upload of File with Dangerous Type in Vvveb Vvvebjs
CVE-2024-29272 This is a Proof-of-Concept fo...
