CVE-2020-14610

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Attachments / File Upload. The supported version that is affected is 12.2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

WTCMS suffers from a file upload vulnerability (CNVD-2020-47243)

WTCMS is a content management system CMS based on Thinkphp. WTCMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

Li Lei's blog suffers from a file upload vulnerability (CNVD-2020-47302)

Li Lei blog is an open source PHP blog management system . Li Lei Blog has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

File Upload Vulnerability in PHPOK of Shenzhen Kunshuo Technology Co., Ltd (CNVD-2020-47296)

PHPOK is a content management system for website construction developed by Shenzhen KunHei Technology Co. A file upload vulnerability exists in PHPOK, which can be exploited by attackers to gain control of the web server...

File Upload Vulnerability in MCMS of MFI Technology Ltd.

MCMS is a website building system of MINGFEI TECHNOLOGY CO. A file upload vulnerability exists in MCMS of MINGFEI TECHNOLOGY LIMITED, which can be exploited by an attacker to execute arbitrary commands...

Li Lei's blog has a file upload vulnerability

Li Lei blog is an open source PHP blog management system . Li Lei Blog has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Webtareas 2.1 / 2.1p File Upload / Information Disclosure Vulnerabilities

Exploit for php platform in category web applications Authenticated File Upload vulnerability Author: AppleBois Homepage: https://sourceforge.net/projects/webtareas/ Affected Version: 2.1 && 2.1p Vendors Claim there's a patch on 2.1p but it's vulnerable and been few weeks without response. ".exe"...

Webtareas 2.1 / 2.1p File Upload / Information Disclosure

Authenticated File Upload vulnerability Author: AppleBois Homepage: https://sourceforge.net/projects/webtareas/ Affected Version: 2.1 && 2.1p Vendors Claim there's a patch on 2.1p but it's vulnerable and been few weeks without response. ".exe" and ".shtml" is allow to upload Below http request is...

File Upload Vulnerability in ejucms of Hainan E&Y Technology Co. Ltd (CNVD-2020-47335)

EJU real estate system ejucms is a set of localized O2O real estate website platform system. Ltd. ejucms file upload vulnerability, attackers can use the vulnerability to obtain control of the web server...

File Upload Vulnerability in uublog v1.1

uublog is a lightweight PHP blog system developed in PHP MySQL. The source code uublogV1.1 is not tightly filtered and has file upload vulnerabilities. uublog v1.1 exists file upload vulnerability, attackers can exploit the vulnerability to upload malicious files and obtain server privileges...

OpenClinic GA File Upload Vulnerability

OpenClinic GA is an open source hospital information management system. The system supports financial management, clinical management and laboratory management and other functions. A file upload vulnerability exists in OpenClinic GA version 5.09.02 and 5.89.05b, which stems from the program faili...

File Upload Vulnerability in Rubik's Hospital Information System

Since its inception, Magic Power has been developing various software systems, WEB applications, etc. with the goal of independent research and development. A file upload vulnerability exists in the Rubik's Hospital Information System, which can be exploited by attackers to gain server privileges...

File Upload Vulnerability in Multiple Systems of Anhui KU Aorui Technology Co.

Ltd. is a company dedicated to the development of teaching and management software for universities and colleges, the development of experimental instruments, and the provision of management overall design and solutions for teaching and research institutions. A file upload vulnerability exists in...

File upload vulnerability in UCMS 1.4.8

UCMS is a simple open source content management system. A file upload vulnerability exists in UCMS 1.4.8, which can be exploited by attackers to upload malicious files and gain server privileges...

File Upload Vulnerability in HulaCWMS v2.0.1 at Qingdao Scorch Culture Media Co.

HulaCWMS Hula enterprise website management system is based on ThinkPHP5 framework for the development of enterprise website management system. HulaCWMS v2.0.1 has a file upload vulnerability that can be exploited by attackers to construct specific file packages, upload malicious files, and gain...

Suqian Xinchao Information Technology Limited Company PHP cloud talent system (phpyun) file upload vulnerability

PHP cloud talent system phpyun is an open source talent and enterprise job search recruitment, hiring solutions built using PHP and MySQL database. A file upload vulnerability exists in the PHP Cloud Talent System phpyun of Suqian Xinchao Information Technology Limited. An attacker can exploit th...

CVE-2020-13887

Kordil EDMS is affected by CVE-2020-13887 in versions up to 2.2.60rc3, where documents_add.php allows remote command execution because PHP files can be uploaded to the Documents folder. The vulnerability is described across multiple sources (NVD entry and CNVD/Red Hat/CVE records) as a remote cod...

File Upload Vulnerability in SDCMS

Times Web Information Management System abbreviation: SDCMS is a portal system developed with asp+access. A file upload vulnerability exists in SDCMS. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

File Upload Vulnerability in WebAccess SCADA at Advantech (China) Co.

Advantech WebAccess/ SCADA is a browser-based SCADA software package for supervisory control, data acquisition and visualization. It is used to automate complex industrial processes in the context of remote operation. A file upload vulnerability exists in Advantech China WebAccess SCADA, which ca...

File Upload Vulnerability in YUNUCMS of Zhenjiang Yunyu Network Technology Co.

CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. Zhenjiang Yunyu Network Technology Co., Ltd. YUNUCMS file upload vulnerability exists. An attacker can exploit the vulnerability to obtain system control privileges...