CVE-2024-24025

CVE-2024-24025 affects Novel-Plus versions 4.3.0-RC1 and earlier, where the vulnerability lives in the FileController.upload() function. An attacker can craft the filename parameter to trigger arbitrary file downloads, exposing sensitive data. The connected PT-2024-20242 entry corroborates an arb...

PT-2024-20371 · Software Publico · E-Sic Livre

Name of the Vulnerable Software and Affected Versions: Software Publico e-Sic Livre versions 2.0 and earlier Description: The issue allows a remote attacker to execute arbitrary code via the extension filtering component. This is a result of a File Upload vulnerability. Recommendations: For...

CVE-2021-4436

The CVE-2021-4436 entry corresponds to the WordPress plugin 3DPrint Lite, affected versions prior to 1.9.1.5. The vulnerability is an unauthenticated arbitrary file upload via the p3dlite_handle_upload AJAX action, caused by missing authorization and file validation. The presence of a .htaccess d...

CVE-2024-22567

File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do...

CVE-2023-6925

The Unlimited Addons for WPBakery Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on the ‘importZipFile’ function in versions up to, and including, 1.0.42. This makes it possible for authenticated attackers with a role that the...

MingSoft MCMS Security Vulnerability

MingSoft MCMS is a complete open source J2ee system from China's MingSoft. A security vulnerability exists in MingSoft MCMS version 5.3.5, which stems from a file upload vulnerability that allows an attacker to upload arbitrary files via a crafted POST request...

Statamic Cross-Site Scripting Vulnerability

Statamic is a powerful flat file Cms built on Laravel by Statamic, Inc. for storing all content, templates, assets, and settings in files instead of a database. A cross-site scripting vulnerability exists in Statamic that stems from an attacker being able to craft and upload HTML files that look...

CVE-2023-31505

An arbitrary file upload vulnerability in Schlix CMS v2.2.8-1, allows remote authenticated attackers to execute arbitrary code and obtain sensitive information via a crafted .phtml file...

Schlix CMS Security Vulnerability

Schlix CMS is an open source content management system CMS based on PHP and MySQL. A security vulnerability exists in Schlix CMS version v2.2.8-1, which stems from an arbitrary file upload vulnerability that could allow an authenticated, remote attacker to execute arbitrary code and obtain...

YonBIP File Upload Vulnerability in UFIDA Network Technology Co.

YonBIP is a new generation of products developed by UFIDA, as the world's leading enterprise digital intelligence platform and application software. A file upload vulnerability exists in YonBIP, which can be exploited by an attacker to upload arbitrary files and execute arbitrary code in the...

Exploit for Unrestricted Upload of File with Dangerous Type in Ispyconnect Agent_Dvr

CVE-2024-22515: File Upload Vulnerability in Agent DVR Inf...

CVE-2024-0939 Byzoro Smart S210 Management Platform uploadfile.php unrestricted upload

A vulnerability has been found in Byzoro Smart S210 Management Platform up to 20240117 and classified as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument fileupload leads to unrestricted upload. The attack can be initiated...

Privilege escalation

An arbitrary file upload vulnerability in LeptonCMS v7.0.0 allows authenticated attackers to execute arbitrary code via uploading a crafted PHP file...

CVE-2023-52324

An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary files on affected installations. Please note: although authentication is required to exploit this vulnerability, this vulnerability could be exploited when the attacker has any...

CVE-2024-22895

DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/moduleupload.php...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system features content publishing, content management, content editing and content retrieval. A security vulnerability exists in DedeCMS...

PT-2024-19602 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.112 Description: The issue is related to a File Upload vulnerability. This vulnerability can be exploited via the "uploads/dede/module upload.php" endpoint. Recommendations: For DedeCMS version 5.7.112, consider restrictin...

Privilege escalation

An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction method of YonBIP v323.05 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2021-31314

File upload vulnerability in ejinshan v8+ terminal security system allows attackers to upload arbitrary files to arbitrary locations on the server...

CVE-2021-31314

The CVE-2021-31314 entry concerns ejinshan v8+ terminal security system and is a file upload vulnerability that allows an attacker to upload arbitrary files to arbitrary locations on the server. The NVD/Red Hat/CNNVD entries corroborate an unrestricted file upload issue affecting ejinshan v8+; th...