5545 matches found
PT-2023-27725 · Idm Sistemas Qsige +1 · Qsige
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The file upload functionality is not implemented correctly, allowing the upload of any type of file. An attacker must log into the application with a valid username to exploit this...
PT-2023-29325 · Emlog Pro · Emlog Pro
Name of the Vulnerable Software and Affected Versions: Emlog Pro version 2.2.0 Description: An arbitrary file upload vulnerability in the component /content/templates/ of Emlog Pro allows attackers to execute arbitrary code via uploading a crafted PHP file. Recommendations: For Emlog Pro version...
mojoPortal 代码问题漏洞
mojoPortal is a cross-platform object-oriented web framework . A file upload vulnerability exists in mojoPortal, which can be exploited by a remote attacker to submit a special request that can upload malicious files and execute arbitrary code in the context of the application...
PT-2023-29064 · Unknown · Mojoportal
Name of the Vulnerable Software and Affected Versions: mojoPortal version 2.7.0.0 Description: The issue allows a remote attacker to execute arbitrary code via the Skin Management function. This is a result of a File Upload vulnerability. Recommendations: For mojoPortal version 2.7.0.0, consider...
mojoPortal 代码问题漏洞
mojoPortal is a cross-platform object-oriented web framework . A file upload vulnerability exists in mojoPortal, which can be exploited by a remote attacker to submit a special request that can upload malicious files and execute arbitrary code in the context of the application...
CVE-2023-43871
A File upload vulnerability in WBCE v.1.6.1 allows a local attacker to upload a pdf file with hidden Cross Site Scripting XSS...
PT-2023-15226 · Unknown · Generex Cs141
Name of the Vulnerable Software and Affected Versions: Generex CS141 versions prior to 2.06 Description: The issue allows for an unrestricted upload of files, enabling an attacker to upload and/or delete any type of file without format restrictions or authentication in the "upload" directory. Thi...
CVE-2023-43872
CMS Made Simple 2.2.18 is affected by a file-upload vulnerability that lets a local attacker upload a PDF containing hidden XSS. Root cause: lack of validation of uploaded files. Impact indicators in the source describe cross-site scripting with low privileges and user interaction required, thoug...
PT-2023-29016 · Wbce · Wbce
Name of the Vulnerable Software and Affected Versions: WBCE version 1.6.1 Description: A File upload vulnerability allows a local attacker to upload a pdf file with hidden Cross Site Scripting XSS. Recommendations: For WBCE version 1.6.1, consider restricting file uploads to prevent exploitation...
CVE-2023-43871
WBCE CMS v1.6.1 is affected by a file upload vulnerability that allows a local attacker to upload a PDF containing hidden XSS. Root cause/technical details are limited to an uploaded file not being properly sanitized, enabling XSS execution in certain contexts. No patch/version remediation is spe...
PT-2023-27335 · Unknown · Welcart E-Commerce
Name of the Vulnerable Software and Affected Versions: Welcart e-Commerce versions 2.7 to 2.8.21 Description: The issue allows a user with editor or higher privilege to upload an arbitrary file to an unauthorized directory. Recommendations: For Welcart e-Commerce versions 2.7 to 2.8.21, consider...
CVE-2023-42331
A file upload vulnerability in EliteCMS v1.01 allows a remote attacker to execute arbitrary code via the manageuploads.php component...
Unrestricted file upload
Unrestricted File Upload vulnerability in Fl3xx Dispatch 2.10.37 and fl3xx Crew 2.10.37 allows a remote attacker to execute arbitrary code via the add attachment function in the New Expense component...
UBUNTU-CVE-2023-38887
File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions...
CVE-2023-36319
File Upload vulnerability in Openupload Stable v.0.4.3 allows a remote attacker to execute arbitrary code via the action parameter of the compress-inc.php file...
CVE-2023-42331
CVE-2023-42331 is a file upload vulnerability in EliteCMS v1.01 that allows a remote attacker to execute arbitrary code through the manage_uploads.php component. The core issue is an unrestricted file upload vector within the EliteCMS 1.01 manage_uploads.php path, enabling code execution with the...
PT-2023-28318 · Elitecms · Elitecms
Name of the Vulnerable Software and Affected Versions: EliteCMS version 1.01 Description: A file upload vulnerability allows a remote attacker to execute arbitrary code via the manage uploads.php component. Recommendations: For EliteCMS version 1.01, consider disabling the file upload functionali...
CVE-2023-38887
Dolibarr ERP CRM is affected by a File Upload vulnerability (CVE-2023-38887) in versions 17.0.1 and earlier. The issue enables a remote attacker to execute arbitrary code and disclose sensitive information via the extension filtering and renaming functions. The Connected documents corroborate the...
