5510 matches found
Unrestricted file upload
Unrestricted File Upload vulnerability in Fl3xx Dispatch 2.10.37 and fl3xx Crew 2.10.37 allows a remote attacker to execute arbitrary code via the add attachment function in the New Expense component...
UBUNTU-CVE-2023-38887
File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions...
CVE-2023-36319
File Upload vulnerability in Openupload Stable v.0.4.3 allows a remote attacker to execute arbitrary code via the action parameter of the compress-inc.php file...
PT-2023-28318 · Elitecms · Elitecms
Name of the Vulnerable Software and Affected Versions: EliteCMS version 1.01 Description: A file upload vulnerability allows a remote attacker to execute arbitrary code via the manage uploads.php component. Recommendations: For EliteCMS version 1.01, consider disabling the file upload functionali...
CVE-2023-42331
CVE-2023-42331 is a file upload vulnerability in EliteCMS v1.01 that allows a remote attacker to execute arbitrary code through the manage_uploads.php component. The core issue is an unrestricted file upload vector within the EliteCMS 1.01 manage_uploads.php path, enabling code execution with the...
CVE-2023-38887
Dolibarr ERP CRM is affected by a File Upload vulnerability (CVE-2023-38887) in versions 17.0.1 and earlier. The issue enables a remote attacker to execute arbitrary code and disclose sensitive information via the extension filtering and renaming functions. The Connected documents corroborate the...
CVE-2023-36319
File Upload vulnerability in Openupload Stable v.0.4.3 allows a remote attacker to execute arbitrary code via the action parameter of the compress-inc.php file...
CVE-2023-36319
File Upload vulnerability in Openupload Stable v.0.4.3 allows a remote attacker to execute arbitrary code via the action parameter of the compress-inc.php file...
CVE-2023-40784
DedeCMS 5.7.102 has a File Upload vulnerability via uploads/dede/modulemake.php...
DedeCMS Code Issues Vulnerabilities
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...
PT-2023-5188 · Unknown · Qms Automotive
Name of the Vulnerable Software and Affected Versions: QMS Automotive versions prior to V12.39 Description: A vulnerability has been identified in the affected application, allowing users to upload arbitrary file types. This could allow an attacker to upload malicious files, potentially leading t...
Webigniter 28.7.23 Shell Upload Vulnerability
Title: WEBIGniter-28.7.23 File Upload - RCE Author: nu11secur1ty Vendor: https://webigniter.net/ Software: https://webigniter.net/demo Reference: https://portswigger.net/web-security/file-upload Description: The media function suffers from file upload vulnerability. The attacker can upload and he...
Bolo Code Issue Vulnerability
Bolo is a Java-based pineapple blogging system, simple and easy to deploy, exquisite theme, intimate service, designed for programmers. A security vulnerability exists in Bolo v.2.6, which stems from a file upload issue...
File upload vulnerability in SuperMap iServer of Beijing SuperMap Software Co. Ltd (CNVD-2023-76221)
SuperMap iServer is a cloud GIS application server based on high-performance cross-platform GIS kernel. A file upload vulnerability exists in SuperMap iServer of Beijing SuperMap Software Co. Ltd, which can be exploited by attackers to gain server privileges...
CVE-2023-40980
File Upload vulnerability in DWSurvey DWSurvey-OSS v.3.2.0 and before allows a remote attacker to execute arbitrary code via the saveimage method and savveFile in the action/UploadAction.java file...
CVE-2023-41637
The CVE-2023-41637 entry concerns GruppoSCAI RealGimm 1.1.37p38, where the Carica immagine function is vulnerable to arbitrary file upload via a crafted HTML file, enabling code execution. Supported by multiple sources in the connected set, the root cause is an unvalidated file upload in that ima...
Command injection
e-Excellence U-Office Force file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker without logging the service can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service...
PT-2023-19664 · Unknown · Pandora Fms
Name of the Vulnerable Software and Affected Versions: Pandora FMS versions prior to 7.67 Description: The issue allows an attacker to execute arbitrary system commands by exploiting an unrestricted file upload vulnerability in the Pandora FMS File Manager component. Recommendations: For versions...
Evsanati Radyo 1.0 Shell Upload
==================================================================================================================================== | Title : evsanati radyo v1.0 Remote File Upload Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 64.0.2...