File upload vulnerability in webplus pro

Webplus pro is a content management system. A file upload vulnerability exists in webplus pro, which can be exploited by an attacker to gain server privileges...

File Upload Vulnerability in Isthmus Electronic Document Security Management System

Electronic document security management system referred to as: CDG is an electronic document security protection software, the system utilizes the driver layer transparent encryption technology, through the encryption and protection of electronic documents, to prevent the internal staff leakage a...

File Upload Vulnerability in OKLite 1.2.25

OKLite is a business building system. A file upload vulnerability exists in OKLite 1.2.25, which can be exploited by attackers to gain control of a web server...

HkCMS has a file upload vulnerability

Ltd. has been committed to the field of higher education and vocational education in China, utilizing innovative education and technology practice-driven teaching for the cultivation of high-end talents in the industry. HkCMS has a file upload vulnerability that can be exploited by attackers to...

File Upload Vulnerability in HadSky Light Forum System

HadSky Light Forum System is a free and open forum system for individual users. A file upload vulnerability exists in the HadSky Light Forum System, which can be exploited by an attacker to gain control of the web server...

File Upload Vulnerability in OKLite Backend

OKLite is a set of minimalist enterprise station system, the main target group is the display of enterprise website users, so that traditional small businesses quickly deploy the site, strengthen their brand awareness, to achieve the publicity of the company's image. There is a file upload...

WordPress wp-file-upload plugin code issue vulnerability (CNVD-2019-30990)

WordPress is a set of blogging platform developed by WordPress Foundation using PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-file-upload is a file upload plugin used in it. A code issue vulnerability exists in the WordPress wp-file-upload plugin,...

File Upload Vulnerability in the Center Management Server System of Guangzhou Paulan Electronics Co.

Guangzhou Paulun Electronic Co., Ltd. is a company mainly engaged in public broadcasting, campus broadcasting, conference system, paperless system, recording and broadcasting system, intelligent campus, stage lighting, LED big screen, landscape lighting and other projects. Guangzhou Paulan...

CVE-2015-9341

The CVE-2015-9341 entry concerns the WordPress wp-file-upload plugin. Affected component: wp-file-upload plugin for WordPress (versions prior to 3.4.1). Root cause: insufficient restrictions on uploads of .php.js files, enabling potentially executable payloads via file upload. Documented impact: ...

CVE-2019-15314

CVE-2019-15314 affects Tiki Wiki CMS Groupware version 18.4, where the file tiki-upload_file.php allows remote attackers to upload JavaScript code that is executed when a user visits tiki-download_file.php?display&fileId= … URL. This represents a stored XSS-like vector via file upload, with impac...

CVE-2019-15130

The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to upload any file type to a candidate's profile picture folder via a crafted recruitmentonline/personalData/actpersonaltab.cfm multiple-part POST request with a predictable WRC01USERID...

Document Uploading Vulnerability in Beijing Yizaitong E-Procurement System

Beijing Yizaitong Information Technology Co., Ltd. has been committed to enterprise procurement information technology, procurement consulting field, oriented to procurement management, group intensive procurement management, lean supply chain, strategic procurement, project supply chain,...

PHPCMS suffers from a file upload vulnerability (CNVD-2019-30562)

PHPCMS is a web content management system based on PHP and Mysql architecture. A file upload vulnerability exists in PHPCMS, which can be exploited by attackers to gain control of a web server...

CVE-2019-0340

The XML parser, which is being used by SAP Enable Now, before version 1902, has not been hardened correctly, leading to Missing XML Validation vulnerability. This issue affects the file upload at multiple locations. An attacker can read local XXE files...

File Upload Vulnerability in DedeCMS v5.7

DedeCMS is a web content management system. A file upload vulnerability exists in DedeCMS v5.7, which can be exploited by attackers to gain server privileges...

PT-2019-2900 · Icedtea +4 · Icedtea-Web +4

Name of the Vulnerable Software and Affected Versions: IcedTea-Web versions 1.7.2 and 1.8.2 Description: The issue is related to the improper sanitization of paths from jar/ elements in JNLP files. This could allow an attacker to trick a victim into running a specially crafted application,...

File upload vulnerability in yzncms system

YznCMS also known as Otaku Male cms is a completely open source project , based on ThinkPHP5.1.X latest version , the framework is easy to expand the functionality , code maintenance , to facilitate the secondary development To help developers simply and efficiently reduce the cost of the seconda...

Medical Virtual Simulation Teaching Experiment Platform Frontend in File Upload Vulnerability

Medical virtual simulation teaching experiment platform system is a virtual reality system with computer virtual reality and digital simulation technology as the core, biosimulation engine, processing factor database, virtual environment interface and other technologies as the support. Learning...

File Upload Vulnerability in YznCMS

YznCMS aka Otaku CMS is a CMS content management system based on the latest TP5.1 framework. A file upload vulnerability exists in YznCMS, which can be exploited by attackers to gain control of the web server...

File Upload Vulnerability in YiYu Cms System

YiYu CMS is a free + open source enterprise content management system based on the TP5.0 framework as the core development. EaseUS CMS system has a file upload vulnerability that can be exploited by attackers to gain server privileges...