File Upload Vulnerability in Panavision OA System

Panavision OA is a standard version of the Panavision Collaboration Office System program, which provides users with a collaborative, integrated office environment. A file upload vulnerability exists in the OA system, which can be exploited by an attacker to gain control of the server...

TnCMS has a file upload vulnerability

TnCMS is a light content management system based on ThinkPHP6+layUI based development. TnCMS suffers from a file upload vulnerability that can be exploited by attackers to gain control of the server...

File Upload Vulnerability in Fast Reach CMS (CNVD-2021-30409)

Fast Row CMS is open source and free PHP enterprise website production, construction, development and optimization of SEO management system. FPS CMS has a file upload vulnerability that can be exploited by attackers to gain control of the server...

File Upload Vulnerability in HYBBS

HYBBS is a PHP website program that supports plugin extensions and template extensions. HYBBS has a file upload vulnerability that can be exploited by attackers to gain control of the web server...

File Upload Vulnerability in OA Office Management System of Xiamen JDT Technology Development Co.

OA office management system is based on the concept of workflow, so that people within the enterprise to share information easily and quickly, efficiently and collaboratively; change the past complex, inefficient manual office, to achieve rapid and comprehensive information collection, informatio...

File Upload Vulnerability in Government Finance Cloud of Beijing UFIDA Government Software Co.

Beijing UFIDA Government Software Co., Ltd. was jointly established by UFIDA Group and China Academy of Fiscal Science, and is an all-round business management informatization solution provider for government departments, institutions and non-profit organizations. A file upload vulnerability exis...

Classyfrieds <= 3.8 - Authenticated Arbitrary File Upload to RCE

The plugin does not properly check the uploaded file when an authenticated user adds a listing, only checking the content-type in the request. This allows any authenticated user to upload arbitrary PHP files via the Add Listing feature of the plugin, leading to RCE. POST /addalisting/ HTTP/1.1...

SonicWall Email Security post-authentication arbitrary file creation vulnerability

SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host. CVE: CVE-2021-20022 Last updated: April 9, 2021, 10:03 p.m...

KODAK Lookout Converged Video System has a file upload vulnerability.

Ltd. is a leading provider of video and security products and solutions. A file upload vulnerability exists in the KODAK Lookout Converged Video System, which can be exploited by attackers to execute arbitrary commands...

File Upload Vulnerability in 720VR Panorama Cloud of Microthink Technology Co.

MicroThink Technology Co., Ltd. is a high-tech company that provides SaaS services for Internet visualization. A file upload vulnerability exists in the 720VR Panorama Cloud of MicroThink Technology Limited, which can be exploited by attackers to gain control of the server...

CVE-2021-28173

The file upload function of Vangene deltaFlow E-platform does not perform access controlled properly. Remote attackers can upload and execute arbitrary files without login...

File Upload Vulnerability in Fusion Command and Dispatch System of Fujian Clarisonic Communication Co.

Founded in 2001, Fujian Qualicom Communication Co., Ltd. is a solution provider and operation service provider focusing on professional communication. A file upload vulnerability exists in the Converged Command and Dispatch System of Fujian Qualicom Communication Co. An attacker can exploit the...

File Upload Vulnerability in Disk Enterprise LCMS

Pan Enterprise LCMS is a lightweight PHP development framework . A file upload vulnerability exists in PanEnterprise LCMS. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

CVE-2021-24171 WooCommerce Upload Files < 59.4 - Unauthenticated Arbitrary File Upload

The WooCommerce Upload Files WordPress plugin before 59.4 ran a single sanitization pass to remove blocked extensions such as .php. It was possible to bypass this and upload a file with a PHP extension by embedding a "blocked" extension within another "blocked" extension in the "wcuffilename"...

Business Hours Pro <= 5.5.0 - Unauthenticated Arbitrary File Upload to RCE

The plugin allows a remote attacker to upload arbitrary files using its manual update functionality, leading to an unauthenticated remote code execution vulnerability. Note WPScanTeam: - The issue has been escalated to Envato on March 30th, 2021 and the plugin has been removed from the...

File upload vulnerability exists in oasys

oasys is an OA office automation system. A file upload vulnerability exists in oasys, which can be exploited by an attacker to gain control of the server...

F5 BIG-IP File Upload Vulnerability

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A file upload vulnerability exists in the F5 BIG-IP, which can be exploited by an attacker to upload malicious files for furth...

File Upload Vulnerability in Flagship Edition of Huatian Power Collaboration Office System

Dalian Huatian Software Co., Ltd. is a high-tech enterprise formed in accordance with the international advanced management mode and system, is a leading technology known as the collaborative management software company, in the collaborative platform, workflow technology and intelligent reporting...

File Upload Vulnerability in Xi'an Ice Network Technology Co.

Xi'an Ice and Snow Network Technology Co., Ltd. was established on 07/07/2014. Legal representative Gai Bing, the company's scope of business includes: web design, computer system design, computer technical services and technical consulting; Internet information services, computer hardware and...

BeyongCMS suffers from file upload vulnerability (CNVD-2021-26005)

BeyongCMS is a content management system based on ThinkPHP 5.1 framework. A file upload vulnerability exists in BeyongCMS, which can be exploited by attackers to gain control of the server...