File upload vulnerability in zzcms framework

zzcms webmaster Merchants content management system, developed by the zzcms team, into the database optimization, content caching, AJAX and other technologies, so that the site's security, stability, load capacity to get a reliable protection. Open source, independent functional modules, to...

File Upload Vulnerability in ShuipFCMS Content Management System

ShuipFCMS a content management system based on ThinkPHP framework as the core, using an independent grouping approach to development. ShuipFCMS has an arbitrary file upload vulnerability that can be exploited by an attacker to gain administrative privileges on the server...

CVE-2020-15849

Re:Desk 2.3 has a blind authenticated SQL injection vulnerability in the SettingsController class, in the actionEmailTemplates method. A malicious actor with access to an administrative account could abuse this vulnerability to recover sensitive data from the application's database, allowing for...

CVE-2020-25763

Seat Reservation System version 1.0 suffers from an Unauthenticated File Upload Vulnerability allowing Remote Attackers to gain Remote Code Execution RCE on the Hosting Webserver via uploading PHP files...

CVE-2020-21564

An issue was discovered in Pluck CMS 4.7.10-dev2 and 4.7.11. There is a file upload vulnerability that can cause a remote command execution via admin.php?action=files...

CVE-2020-25763

Seat Reservation System version 1.0 suffers from an Unauthenticated File Upload Vulnerability allowing Remote Attackers to gain Remote Code Execution RCE on the Hosting Webserver via uploading PHP files...

File Uploading Vulnerability in Jiu Jia Yi Fashion Enterprise Management System

Xi'an JiuJiaYi Information Information Co., Ltd. is a science and technology enterprise of informationization construction and management consulting service in fashion industry. A file upload vulnerability exists in the JiuJiaYi fashion enterprise management system, which can be exploited by an...

ismartgate PRO File Upload Vulnerability (CNVD-2021-01055)

iSmartGate is a smart garage door opener system. The ismartgate PRO has a security vulnerability that allows remote attackers to exploit the vulnerability by submitting a special request to upload a malicious file to the system...

File Upload Vulnerability in School Office OA System of Guangzhou Yingfeng Information Technology Co.

Guangzhou Yingfeng Information Technology Co., Ltd. school office OA system is a comprehensive management platform for schools, a comprehensive information management system for schools, and a digital campus management system. There is a file upload vulnerability in the Guangzhou Yingfeng...

CVE-2020-15839

CVE-2020-15839 affects Liferay Portal before 7.3.3 and Liferay DXP 7.1 before fix pack 18 and 7.2 before fix pack 6, where there is no restriction on the size of multipart/form-data POST uploads. This allows remote authenticated users to cause a denial-of-service by uploading large files. The ava...

CVE-2020-25733

webTareas through 2.1 allows upload of the dangerous .exe and .shtml file types...

Shijiazhuang City Zhenghong Network Technology Co., Ltd. Shop7z online shopping system v5.4 flagship version of the existence of file upload vulnerability

Shop7z online shopping system is a domestic ASP online store platform software. Shijiazhuang City Zhenghong Network Technology Co., Ltd. Shop7z online shopping system v5.4 flagship version of the existence of file upload vulnerability, an attacker can be exploited to obtain server control...

CVE-2020-23828

A File Upload vulnerability in SourceCodester Online Course Registration v1.0 allows remote attackers to achieve Remote Code Execution RCE on the hosting webserver by uploading a crafted PHP web-shell that bypasses the image upload filters. An attack uses...

File Upload Vulnerability in Smart-MDS Multimedia Command and Dispatch System of Yixin Technology

The Smart-MDS multimedia command and dispatch system has a powerful convergence access function, providing a unified scheduling management platform with multi-service convergence, access to mainstream audio and video communication systems and other functions. There is a file upload vulnerability ...

vtenext file upload vulnerability

vtenext is a unique open source CRM + BPM solution for comprehensive management of leads, contacts and customers. A file upload vulnerability exists in vtenext version 19 CE. An attacker can exploit the vulnerability to upload a file with the extension .pht, which can be used for remote code...

CVE-2020-10228

A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, resulting in remote code execution...

Design/Logic Flaw

An access permission override in Apache Struts 2.0.0 to 2.5.20 may cause a Denial of Service when performing a file upload...

Palo Alto Networks PAN-OS Resource Management Error Vulnerability

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. Palo Alto Networks PAN-OS Resource Management Error Vulnerability. The vulnerability originates from the mismanagement of system resources e.g., memory, disk space, files, etc. by a netwo...

File Upload Vulnerability in CMS Backend

High Fives CMS is a free database-free CMS system. A file upload vulnerability exists in the backend of High Fives CMS. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

CVE-2020-24986

Concrete5 (CMS) up to and including 8.5.2 is vulnerable to an Unrestricted Upload of a dangerous file type (e.g., .php) via the File Manager, enabling execution of arbitrary commands. Affected: Concrete5 8.5.2 and earlier. Root cause: file-type upload not sufficiently restricted. Impact: potentia...