CVE-2017-11561

CVE-2017-11561 affects ZOHO ManageEngine OpManager 12.2. An authenticated user can upload arbitrary files in the Group Chat or Alarm sections, enabling potential web shells. The vulnerability arises from insecure file upload handling, allowing an attacker to upload executable content. Public desc...

File Upload Vulnerability in Cheng Technologies CMS

Xi'an Zhicheng Information Technology Co., Ltd. is one of the ICP/ISP enterprises in Shaanxi Province that can operate value-added telecommunication business directly assessed by the Ministry of Industry and Information Technology and approved by Shaanxi Provincial Communication Administration...

CVE-2019-6513

WSO2 API Manager 2.6.0 is affected by CVE-2019-6513: a logged-in user can upload, as API documentation, any type of file by changing its extension to an allowed one. This vulnerability is described across multiple sources (NVD, OSV, CVE records) with the same root issue. No explicit exploits, mit...

CVE-2019-12170

ATutor through 2.2.4 is vulnerable to arbitrary file uploads via the mods/core/backups/upload.php aka backup component. This may result in remote command execution. An attacker can use the instructor account to fully compromise the system using a crafted backup ZIP archive. This will allow for PH...

File upload vulnerability in Baiheng network cms

Baiheng Networks cms uses php+mysql+bootstrap and other frameworks to develop the building system. Baiheng Networks cms has a file upload vulnerability that can be exploited by attackers to gain control of the web server...

File Upload Vulnerability in Crooked Cool CMS

Crooked Cool CMS is a content management system. A file upload vulnerability exists in Crooked Cool CMS, which can be exploited by attackers to gain control of a web server...

Empire cms has a file upload vulnerability

Empire CMS is a content management system CMS. A file upload vulnerability exists in Empire cms, which can be exploited by an attacker to gain control of a web server...

File Upload Vulnerability in AUO Internet Behavior Management System

AUO Electronic Equipment Shanghai Co., Ltd. is a company that mainly deals with network equipment, wireless equipment, switches and other items. A file upload vulnerability exists in the AUO Internet Behavior Management System IBM, which can be exploited by attackers to gain server privileges...

File Upload Vulnerability in Geek-Framework

Geek-Framework is built on the basis of SpringBoot, a Java foundation development framework . Geek-Framework has a file upload vulnerability that can be exploited by an attacker to gain control of a web server...

File Upload Vulnerability in Campus Flat Fee System

Tianjin Shenzhou Haotian Technology Co., Ltd. is a high-tech enterprise integrating management software design, development, sales and service. A file upload vulnerability exists in the Campus Unified Charging System, which can be exploited by attackers to gain control of the web server...

File Upload Vulnerability in Aiwo Real Estate System v4.7

Intimate cat imcat is an extremely light, minimalist general-purpose PHP website system. File upload vulnerability exists in Aiwo Real Estate System v4.7, which can be exploited by attackers to upload malicious code and gain server privileges...

Cross-site Request Forgery (CSRF)

Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7. It was discovered that sending requests containing large headers to the Web Console produced a Java OutOfMemoryError in the HTTP management interface. An attacker could use thi...

File Upload Vulnerability in niushop Multi-Merchant Basic v1.11

NiuShop B2B2C Multi-Merchant Mall System is a PHP open source e-commerce system designed and developed completely independently by Shanxi NiuKu Information Technology Co. NiuShop B2B2C Multi-merchant Mall System Up.php file file upload vulnerability. An attacker can upload arbitrary files and...

CVE-2019-11615

CVE-2019-11615 pertains to doorGets 7.0, where an arbitrary file upload vulnerability exists in /fileman/php/upload.php. A remote normal registered user can exploit this to upload backdoor files and gain server control. The Red Hat and CNVD entries corroborate the same issue. The available docume...

File upload vulnerability in the file li***_ed***.php of the backend management system of Acme CMS

Acme CMS is a CMS builder using PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction. There is a file upload vulnerability in the file lied.php in the background management system of Acme CMS. Attackers can use the vulnerability to upload webshe...

File upload vulnerability in the vi***_ed***.php file of the backend management system of Acme CMS

Acme CMS is a CMS builder using PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction. There is a file upload vulnerability in the vied.php file in the background management system of Acme CMS. Attackers can use the vulnerability to upload webshe...

PHPCMS has a file upload vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. A file upload vulnerability exists in PHPCMS, which can be exploited by attackers to gain control of a web server...

CVE-2019-9951

Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100 firmware before 2.31.174 is affected by an unauthenticated file upload vulnerability. The page...

CVE-2019-11446

An issue was discovered in ATutor through 2.2.4. It allows the user to run commands on the server with the teacher user privilege. The Upload Files section in the File Manager field contains an arbitrary file upload vulnerability via upload.php. The $IllegalExtensions value only lists lowercase a...

CVE-2019-11223

An Unrestricted File Upload Vulnerability in the SupportCandy plugin through 2.0.0 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension...