File Upload Vulnerability in Pluck CMS Backend

Pluck is a small and simple content management system written in php. A file upload vulnerability exists in the Pluck CMS backend, which can be exploited by attackers to gain server privileges...

File Upload Vulnerability in Blue Route Blog System

Blue Route blog system using PHP + MySQL to build, which is an easy to use, powerful blog system, simple code and double caching mechanism so that the system has a general speed of access. Blue Route blog system has a file upload vulnerability , attackers can exploit the vulnerability to obtain...

File Upload Vulnerability in Everlab Cloud Lab Management System

Everlab Cloud Lab is a full-featured informatization communication and management platform tailored for scientific research users by Beijing Kubaza Information Technology Co. Everlab Cloud Lab is a one-stop solution for laboratory informationization management. A file upload vulnerability exists ...

File Upload Vulnerability in TopCloud Self-service Website Building System

The top cloud station system is Chongqing Chujie Technology Co., Ltd. independent research and development "PC + cell phone + micro site + shopping" integration of the whole network marketing PHP enterprise intelligent station software. Peak cloud self-service website building system file upload...

File Upload Vulnerability in Blue Route Blog System

Shenzhen Blue Route Technology Co., Ltd, provides cloud computing products, cloud computing solutions, enterprise cloud application software, etc., is committed to providing customers with professional cloud services. Blue Route blog system file upload vulnerability, attackers can use the...

File upload vulnerability in 5iSNS content payment system

5iSNS Labs is dedicated to providing a source code for webmasters, with a new version of the system, covering features such as libraries and posts. A file upload vulnerability exists in the 5iSNS content payment system, which can be exploited by an attacker to obtain webmaster privileges...

File Upload Vulnerability in Cicada Knowledge Enterprise Portal System

Cicada Knowledge Enterprise Portal System is an enterprise portal system designed for enterprise marketing use. A file upload vulnerability exists in Cicada Knowledge Enterprise Portal System, which can be exploited by attackers to gain control of the web server...

File Upload Vulnerability in Z-Blog

Z-Blog is an open source program based on Asp and PHP platforms. Z-Blog has a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

File Upload Vulnerability in PowerCreator CMS

PowerCreator is a software development and product manufacturing company for the global audio and video industry. A file upload vulnerability exists in PowerCreator CMS, which can be exploited by an attacker to gain control of the web server...

Schlix CMS File Upload Vulnerability

Schlix CMS is an open source content management system CMS based on PHP and MySQL. A file upload vulnerability exists in admin/app/mediamanager in Schlix CMS version 2.1.8-7, which stems from the program's failure to restrict file uploads and can be exploited by an attacker to execute code...

Xuzhou Mengchuang Information Technology Co., Ltd. website building system has file upload vulnerability

Vlcms is subordinate to Xuzhou Mengchuang Information Technology Co., Ltd. and Jiangsu Vlcms Network Technology Co., Ltd. and has been focusing on providing technical products and services in the game industry for 9 years, providing professional and scalable game operation technical solutions for...

CVE-2019-18370

An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. The backup file is in tar.gz format. After uploading, the application uses the tar zxf command to decompress, so one can control the contents of the files in the decompressed directory. In addition, the application's sh...

File Upload Vulnerability in OneBase

OneBase is an open source, fast and simple, object-oriented application development architecture based on ThinkPHP5. A file upload vulnerability exists in OneBase, which can be exploited by an attacker to gain control of the web server...

UQCMS Cloud Business has a file upload vulnerability

UQCMS Cloud Business is a B2B2C e-commerce software, the program uses PHP+MYSQL. UQCMS Cloud Business has a file upload vulnerability that can be exploited by attackers to gain server control privileges...

File Upload Vulnerability in Xingyunhai CMS 3.6

Xing Yunhai CMS XYHCMS is a completely open source CMS content management system. XYHCMS3.6 file upload vulnerability, attackers can use the vulnerability to execute arbitrary code...

File Upload Vulnerability in IC Space Management System

IC Space Management System is a library IC space management system developed by Hangzhou Lianchuang Information Technology Co. IC Space Management System has a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

CheerWeb has a file upload vulnerability

CheerWeb is a general-purpose website system designed with PHP+MySQL architecture, which is simple, lightweight, practical, free and shared. CheerWeb suffers from a file upload vulnerability, which can be exploited by an attacker to upload arbitrary files and gain webmaster privileges...

File Upload Vulnerability in UQCMS

UQCMS is an easy-to-use B2B2C multi-store system based on PHP+MySql. A file upload vulnerability exists in UQCMS, which can be exploited by attackers to obtain sensitive information...

File Upload Vulnerability in ZZZCMS

ZZZCMS enterprise station system using PHP + MYSQL language development, is a set of mature and perfect CMS system, the cover is fully functional, customization of powerful, scalable, high security, can easily solve most of the enterprise station needs. ZZZCMS file upload vulnerability, attackers...

CVE-2019-17490

app\modules\polygon\controllers\ProblemController in Jiangnan Online Judge aka jnoj 0.8.0 allows arbitrary file upload, as demonstrated by PHP code with a .php filename but the image/png content type to the web/polygon/problem/tests URI...