UCMS suffers from a file upload vulnerability (CNVD-2020-68694)

UCMS is a simple open source content management system, it can be very convenient to quickly develop various kinds of enterprise station, article station and station system. UCMS has a file upload vulnerability , the attacker can obtain server privileges...

File upload vulnerability in several webcams of Shenzhen Qiaoan Technology Co.

Shenzhen Qiaoan Technology Co., Ltd. is a professional R&D manufacturer of surveillance cameras, specializing in the production of Qiaoan surveillance, Qiaoan surveillance cameras and so on. Shenzhen Qiaoan Technology Co., Ltd. a number of webcam file upload vulnerability, attackers can use the...

CVE-2020-25406

app\admin\controller\sys\Uploads.php in lemocms 1.8.x allows users to upload files to upload executable files...

CVE-2020-25406

CVE-2020-25406 affects lemocms 1.8.x, where app\admin\controller\sys\Uploads.php handles file uploads in a way that allows uploading executable files. The vulnerability arises in the file upload handling and could enable an attacker to upload executable content through the upload endpoint. Public...

CVE-2020-25406

app\admin\controller\sys\Uploads.php in lemocms 1.8.x allows users to upload files to upload executable files...

HadSky Light Forum program has a file upload vulnerability

HadSky Light Forum program is a personal original PHP system. The HadSky Light Forum program has a file upload vulnerability that can be exploited by attackers to gain control of the server...

CVE-2020-28687

CVE-2020-28687 affects ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0. The vulnerability arises from the edit profile functionality, which allows remote attackers (authenticated users) to upload arbitrary files, enabling a potential remote code execution via a crafted profile picture (e....

Gila CMS File Upload Vulnerability

Gila CMS is an open source content management system CMS based on PHP and MySQL. A file upload vulnerability exists in Gila CMS 1.16.0. An attacker can exploit this vulnerability to upload a shell to the tmp directory, which can then be used to execute PHP files using .htaccess via the logging...

Shijiazhuang Jiesou Network Technology Co., Ltd. Mu Feng CMS has unauthorized access vulnerability

Mu Feng CMS is Shijiazhuang JieSuo network 202 years launched a newest use of think PHP framework of the website background management system. A file upload vulnerability exists in Shijiazhuang Jiesou Network Technology Co. An attacker can use this vulnerability to directly modify the administrat...

File upload vulnerability in Billing Master Aj***.cl***.php file

Billing Master is a real estate agent ERP management system. A file upload vulnerability exists in the Billing Master Aj.cl.php file. An attacker can exploit this vulnerability to gain server privileges...

File upload vulnerability in Mu Feng CMS of Shijiazhuang Jiesou Network Technology Co.(CNVD-2020-68885)

Mu Feng CMS is Shijiazhuang JieSuo network 202 years launched a newest use of think PHP framework of the website background management system. A file upload vulnerability exists in Shijiazhuang Jiesou Network Technology Co. An attacker can exploit this vulnerability to gain control of the web...

Unrestricted file upload

In Sentrifugo 3.2, users can share an announcement under "Organization - Announcements" tab. Also, in this page, users can upload attachments with the shared announcements. This "Upload Attachment" functionality is suffered from "Unrestricted File Upload" vulnerability so attacker can upload...

File Upload Vulnerability in XHCMS Backend

XHCMS is a version of a general-purpose cms system that supports full site static. There is a file upload vulnerability in the background of XHCMS, which can be exploited by attackers to obtain server control privileges...

Victor CMS suffers from a file upload vulnerability

Victor CMS is a simple content management system. Victor CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Victor CMS suffers from file upload vulnerability (CNVD-2020-66852)

Victor CMS is a simple content management system. Victor CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Victor CMS suffers from a file upload vulnerability (CNVD-2020-67388)

Victor CMS is a simple content management system. Victor CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...

07FLY-CMS V1.1.4 has a file upload vulnerability

Zero Takeoff is a professional information technology service provider, mainly dedicated to the Internet basic business, website construction, management system, software customization, optimization and promotion, e-commerce operation and other comprehensive information technology services...

Victor CMS suffers from file upload vulnerability (CNVD-2020-67324)

Victor CMS is a simple content management system. Victor CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Victor CMS suffers from a file upload vulnerability (CNVD-2020-67325)

Victor CMS is a simple content management system. Victor CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...

File Upload Vulnerability in Website Building System of Wuhan Jinglun Technology Development Co.

Wuhan Jinglun Technology Development Co., Ltd. is a company that mainly deals with software development, system integration, digital media marketing and other projects. A file upload vulnerability exists in the website building system of Wuhan Jinglun Technology Development Co. An attacker can us...