File upload vulnerability exists in super cms (CNVD-2021-03275)

Super CMS is a content management system. A file upload vulnerability exists in super cms, which can be exploited by attackers to gain control of the server...

File Upload Vulnerability in Website Building System of Suzhou Ernst Network Technology Co.

Suzhou Ernst Network Technology Co., Ltd. is a marketing plan, providing medium and high-end website design, graphic design, program development and network marketing and with Suzhou Topps Network Technology Co. Suzhou Ernst Network Technology Co., Ltd. station building system there is a file...

File upload vulnerability in Zhiyuan OA system (CNVD-2021-01627)

Zhiyuan OA is a collaborative management software, a digital collaborative operation platform for medium-sized and large group organizations. A file upload vulnerability exists in Zhiyuan OA system. The vulnerability is due to the existence of unauthorized access vulnerability in some interfaces,...

File Upload Vulnerability in Nanjing Guanbang Network Technology Co.

Nanjing Guanbang Network Technology Co., Ltd. was founded in September 2004, is a private software enterprise through the Jiangsu Provincial Information Industry Department of double-soft recognition. It is mainly engaged in the research and development and sales of education and teaching softwar...

File Upload Vulnerability in BenQ Order Management Platform of Chongqing BenQ Software Co.

Chongqing BenYi Software Co., Ltd. is an authorized marketing service organization under Kingdee International Software Group. It is mainly engaged in sales, implementation and after-sales service of Kingdee software. There is a file upload vulnerability in the order management platform of...

File Upload Vulnerability in OpenLab Programming Network Teaching and Exam Platform of Shanghai Rigel Software Co.

OpenLab is a comprehensive teaching management and experiment platform for program design teaching, daily practice, on-line experiment, unit test, mid-term and final exam. A file upload vulnerability exists in the OpenLab Programming Network Teaching and Testing Platform of Shanghai Rigel Softwar...

CVE-2020-35945

CVE-2020-35945 affects WordPress environments using the Divi Builder plugin, Divi theme, and Divi Extra theme prior to 4.5.3. The vulnerability allows authenticated attackers with contributor-level or higher privileges to upload arbitrary files, including PHP, because the extension check is perfo...

WordPress 代码问题漏洞

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.One SEO Pack is a plugin for WordPress. A security vulnerability exists in One SEO Pack plugin for WordPress versions...

File Upload Vulnerability in WAC Wireless Controller Software

Sundray WAC is a set of WirelessAccessControl software from Shenzhen Sundray Technology Co. The WAC wireless controller software has a file upload vulnerability that can be exploited by an attacker to upload malicious files to gain server control privileges...

Dbhcms has a file upload vulnerability

Dbhcms is a small PHP open source content management system for personal and small business websites. Dbhcms has a file upload vulnerability that can be exploited by attackers to gain control of the server...

File Upload Vulnerability in RoadFlow Workflow System

RoadFlow is an integrated workflow engine ASP.NET CORE MVC rapid development framework . A file upload vulnerability exists in the RoadFlow workflow system that can be exploited by an attacker to gain control of the server...

File Upload Vulnerability in Laiku Push E-commerce System (CNVD-2021-01290)

Laike Push www.laiketui.com is a mall system and mall website construction provider for enterprise-level businesses to provide retail mall, B2B2C multi-user mall system, community group-buying mall system, micro letter distribution system, small program mall, micro distribution system and other...

CVE-2020-35627

Ultimate WooCommerce Gift Cards 3.0.2 is affected by a file upload vulnerability in the Custom GiftCard Template that can remotely execute arbitrary code. Once it contains the function "Custom Gift Card Template", the function of uploading a custom image is used, changing the name of the image...

CVE-2020-35627

Ultimate WooCommerce Gift Cards 3.0.2 is affected by a file upload vulnerability in the Custom GiftCard Template that can remotely execute arbitrary code. Once it contains the function "Custom Gift Card Template", the function of uploading a custom image is used, changing the name of the image...

CVE-2020-35627

CVE-2020-35627 affects Ultimate WooCommerce Gift Cards 3.0.2. The issue is a file-upload vulnerability in the Custom GiftCard Template that enables remote code execution. By triggering the image-upload flow, an attacker can rename the image extension to PHP and execute PHP code on the server. Thi...

There are file uploading loopholes in the streaming media comprehensive application platform for cultural sharing project of Nanjing Chuanzhong Software Technology Co.

Nanjing ChuanSong Software Technology Co., Ltd. was founded in 2010, the company's business scope includes computer hardware and software, communication equipment, environmental protection equipment, electronic product development. There is a file upload vulnerability in Nanjing ChuanSong Softwar...

File Upload Vulnerability in DedeCMS Editor

The popular domestic content management system CMS multi-terminal all-media solution, DedeCMSV6 system is based on PHP7.X development, highly scalable and fully open source. A file upload vulnerability exists in the DedeCMS editor, which can be exploited by attackers to upload malicious code and...

Projectworldsofficial Online-matrimonial-project-in-php 代码问题漏洞

Online-matrimonial-project-in-php is a Php-based online marriage platform for the Redisgraph Projectworldsofficial community. redisgraph Online-matrimonial-project-in-php file Upload vulnerability, which can be exploited by attackers to upload maliciously crafted PHP files on a hosted web server ...

File Upload Vulnerability in EAP Enterprise Adaptation Management Platform of Shenzhen Aide Digital Intelligence Technology Co.

EAP Enterprise Adaptive Management Platform is an enterprise management software designed by Sap for the complexity and diversity of real estate enterprise management in China. Ltd. EAP Enterprise Adaptation Management Platform has a file upload vulnerability that can be exploited by an attacker ...

File Upload Vulnerability in Situ CMS

Situ CMS is the short name of Situ Tourism Website Management System, which is a self-developed website management system applicable to the construction of tourism websites. A file upload vulnerability exists in SITO CMS. An attacker can exploit this vulnerability to gain control of the web serve...