5544 matches found
PT-2022-25919 · Unknown · Online Diagnostic Lab Management System
Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue allows attackers to execute arbitrary code via a crafted PHP file, leveraging an arbitrary file upload vulnerability in the /php action/editProductImage.php component...
PT-2022-25846 · Unknown · Church Management System
Name of the Vulnerable Software and Affected Versions: Church Management System version 1.0 Description: The issue concerns an arbitrary file upload vulnerability in the /admin/admin pic.php component. This allows attackers to execute arbitrary code via a crafted PHP file. The "arbitrary file...
Privilege escalation
An arbitrary file upload vulnerability in the component /leavesystem/classes/Users.php?f=save of Online Leave Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
Privilege escalation
An arbitrary file upload vulnerability in the component /phpaction/editFile.php of Online Diagnostic Lab Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
Backdrop CMS 代码问题漏洞
Backdrop CMS is an open source content management system CMS. A code issue vulnerability exists in Backdrop CMS version 1.22.0, which stems from themes having an unrestricted file upload vulnerability that can be exploited by an attacker to remotely execute code...
CVE-2022-41379
CVE-2022-41379 affects Online Leave Management System v1.0. The vulnerability is an arbitrary file upload in the component path /leave_system/classes/Users.php?f=save, allowing an attacker to execute arbitrary code via a crafted PHP file. The published metrics list a CVSS 3.1 base score of 7.2 (H...
Design/Logic Flaw
DedeCMS 5.7.98 has a file upload vulnerability in the background...
CVE-2022-40886
DedeCMS 5.7.98 has a file upload vulnerability in the background...
php uploader 代码问题漏洞
CreativeDream php uploader is an easy-to-use, high-performance file upload script for CreativeDream personal developers. CreativeDream php uploader version 0.3 is vulnerable to arbitrary file uploads, which stem from a lack of valid validation of uploaded files by the application. An attacker cou...
PT-2022-25354 · Unknown · Mojoportal
Name of the Vulnerable Software and Affected Versions: mojoPortal version 2.7 Description: The issue allows attackers to execute arbitrary code via a crafted PNG file, exploiting an arbitrary file upload vulnerability. Recommendations: For mojoPortal version 2.7, consider disabling the file uploa...
CVE-2022-40407
A zip slip vulnerability in the file upload function of Chamilo v1.11 allows attackers to execute arbitrary code via a crafted Zip file...
CVE-2022-37346
The CVE-2022-37346 issue affects the EC-CUBE plugin “Product Image Bulk Upload Plugin” versions 1.0.0 and 4.1.0, which has an insufficient verification (CWE-20) when uploading files. An unauthenticated remote attacker can upload arbitrary non-image files, and if a user with administrative privile...
CVE-2022-40925
Zoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the "saveevent" file of the "Events" module in the background management system...
CVE-2022-40924
Zoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the "saveanimal" file of the "Animals" module in the background management system...
WordPress plugin CM Download Manager 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Arbitrary file upload...
CVE-2022-41352
An issue was discovered in Zimbra Collaboration ZCS 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole extraction to /opt/zimbra/jetty/webapps/zimbra/public that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also,...
CVE-2022-40932
In Zoo Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of the "gallery" file of the "Gallery" module in the background management system...
Privilege escalation
Authenticated admin+ Arbitrary File Edit/Upload vulnerability in XplodedThemes WPide plugin = 2.6 at WordPress...
CVE-2022-40217 WordPress WPide plugin <= 2.6 - Authenticated Arbitrary File Edit/Upload vulnerability
Authenticated admin+ Arbitrary File Edit/Upload vulnerability in XplodedThemes WPide plugin = 2.6 at WordPress...