5508 matches found
Zhenjiang Yunyou Network Technology Co., Ltd. Yunyou CMS has file upload vulnerability
CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. Zhenjiang City, Yun You Network Technology Co., Ltd. Yun You CMS file upload vulnerability, attackers can use the vulnerability to obtain server control privileges...
File Upload Vulnerability in Yunyou CMS of Zhenjiang Yunyou Network Technology Co. Ltd (CNVD-2020-41769)
CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. Zhenjiang City, Yun You Network Technology Co., Ltd. Yun You CMS file upload vulnerability, attackers can use the vulnerability to obtain server control privileges...
File Upload Vulnerability in Guojiz International Website Navigation System
Guojiz International Website Navigation System is a navigation system based on thinkphp. A file upload vulnerability exists in Guojiz International Website Navigation System, which can be exploited by an attacker to gain server control privileges...
File Upload Vulnerability in LJCMS of Beijing Liangjing Zhicheng Technology Co., Ltd (CNVD-2020-41832)
LJCMS is free and open source php enterprise website management system. Beijing LiangJingZhiCheng Technology Limited Liability Company LJCMS file upload vulnerability, attackers can use the vulnerability to obtain server control privileges...
IBM Spectrum Protect Plus File Upload Vulnerability
IBM Spectrum Protect Plus is a suite of data protection platforms from IBM USA. The platform provides organizations with a single point of control and management and supports backup and recovery for virtual, physical and cloud environments of all sizes. A security vulnerability exists in IBM...
Palm Haidian App has file upload vulnerability
Palm Haidian APP is an official local news and information reading platform. There is a file upload vulnerability in Palm Haidian APP, which can be exploited by an attacker to gain control of the web server...
File upload vulnerability exists in uublog (CNVD-2020-33969)
uublog is a lightweight PHP blog system source code developed in PHP + MySQL. uublog has a file upload vulnerability that can be exploited by an attacker to gain control of the web server...
CVE-2020-4041
CVE-2020-4041 (Bolt CMS) affects Bolt CMS versions before 3.7.1. The vulnerability concerns the filename of uploaded files, which is stored in a way that allows stored XSS after the file is created/uploaded. Although initial file names cannot inject JavaScript, renaming the file post-upload can i...
File upload vulnerability in BEESCMS backend ad***_pi***_up***.php page
BEESCMS is a scalable content management system CMS based on PHP and MySQL. A file upload vulnerability exists in the adpiup.php page in the BEESCMS backend. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...
SUSE-SU-2020:1546-1 Security update for php72
This update for php72 fixes the following issues: - CVE-2020-7064: Fixed a one byte read of uninitialized memory in exifreaddata bsc1168326. - CVE-2020-7066: Fixed URL truncation getheaders if the URL contains zero \0 character bsc1168352. - CVE-2019-11048: Improved the handling of overly long...
File upload vulnerability in uublog
uublog is a lightweight website builder. A file upload vulnerability exists in uublog, which can be exploited by an attacker to gain control of the server...
File Upload Vulnerability in Smart Garage License Plate Recognition Machines
Shenzhen Fuji Intelligent System Co., Ltd. is a supplier of intelligent entrance/exit management equipment and a professional supplier of intelligent eco-environmental solutions. There is a file upload vulnerability in the Smart Parking License Plate Recognition Machine, which can be exploited by...
File upload vulnerability in beescms backend
BEESCMS is a scalable content management system CMS based on PHP and MySQL. A file upload vulnerability exists in the beescms backend. An attacker can exploit the vulnerability to upload malicious files and gain server privileges...
PHPOK suffers from a file upload vulnerability (CNVD-2020-38450)
PHPOK is a content management system for website construction developed by Shenzhen 锟铻科技有限公司 formerly known as PHPOK Studio, written in PHP, default MySQL database storage, based on the LGPL open source agreement license released to the online sharing use. PHPOK file upload vulnerability exists...
MCMS suffers from a file upload vulnerability (CNVD-2020-38496)
MCMS is a website building system of MINGFEI TECHNOLOGY CO. MCMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of a web server...
File Upload Vulnerability in Multiple Versions of Intimate Home Care Intimate Cat (imcat)
Intimate Cat imcat is a general-purpose website system designed in PHP+MySQL architecture. File upload vulnerability exists in several versions of Sticky Home Sticky Cat imcat. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...
Raonwiz DEXT5 File Upload Vulnerability
Raonwiz DEXT5 is a set of HTML5-based file transfer solution from Raonwiz, Korea. The product supports encrypted file transfer, form building, etc. DEXT5Upload is one of the file upload components. A security vulnerability exists in DEXT5Upload in Raonwiz DEXT5 2.7.1402870 and earlier versions,...
File Upload Vulnerability in Extreme CMS
Extreme CMS is an open source PHPCMS web content management system. A file upload vulnerability exists in Extreme CMS, which can be exploited by attackers to gain administrative privileges on the web server...
File Upload Vulnerability in Hangzhou Vickers Club Network Technology Co.
Hangzhou Vickers Club Network Technology Co., Ltd. is a website builder. A file upload vulnerability exists in the website builder system of Hangzhou Vickers Club Network Technology Co. Ltd, which can be exploited by attackers to upload arbitrary files...