Online Discussion Forum 代码问题漏洞

Online Discussion Forum is a forum website. Itsourcecode A code issue vulnerability exists in version 1.0 of Online Discussion Forum, which stems from the parameter image in the file changeprofilepicture.php that can lead to unrestricted uploads...

PT-2024-36489 · Unknown · Itsourcecode Online Discussion Forum

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Discussion Forum version 1.0 Description: A critical issue has been found in the itsourcecode Online Discussion Forum, affecting the file change profile picture.php. The manipulation of the image argument leads to...

SourceCodester Online Discussion Forum Site 代码问题漏洞

SourceCodester Online Discussion Forum Site is an application from SourceCodester, Inc. An online discussion forum. A code issue vulnerability exists in SourceCodester Online Discussion Forum Site version 1.0, which stems from an incorrect manipulation of the parameter ima that can lead to...

SchoolWebTech Code Issues Vulnerabilities

SchoolWebTech is a campus website application. A code issue vulnerability exists in SchoolWebTech version 1.0, which stems from an incorrect manipulation of the parameter image that can lead to unrestricted uploads...

CVE-2024-2663 ZD YouTube FLV Player <= 1.2.6 - Server-Side Request Forgery

The ZD YouTube FLV Player plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.2.6 via the $GET'image' parameter. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web...

PT-2024-21432 · WordPress · Zd Youtube Flv Player

Name of the Vulnerable Software and Affected Versions: ZD YouTube FLV Player plugin for WordPress versions up to, and including, 1.2.6 Description: The issue allows unauthenticated attackers to make web requests to arbitrary locations originating from the web application, which can be used to que...

WordPress plugin ZD YouTube FLV Player 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

PT-2024-26380 · Byzoro · Byzoro Smart S80 Management Platform

Name of the Vulnerable Software and Affected Versions: Byzoro Smart S80 Management Platform versions up to 20240317 Description: A critical issue affects some unknown functionality of the file /useratte/userattestation.php. The manipulation of the web img argument leads to unrestricted upload. Th...

Simple Car Rental System 代码问题漏洞

Simple Car Rental System is a simple car rental application. A code issue vulnerability exists in version 1.0 of Simple Car Rental System due to a file upload vulnerability in the parameter Upload Image of the file add-vehicle.php...

Online-Book-Store-Website Code Issue Vulnerability

Online-Book-Store-Website is an online bookstore website. A code issue vulnerability exists in version 1.0 of Online-Book-Store-Website that stems from an unrestricted upload in the updateimage parameter of the /productupdate.php?update=1 file...

CVE-2024-27747

File Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email Image parameter in the profile.php component...

CVE-2024-27747

File Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email Image parameter in the profile.php component...

Cross site scripting

Cross Site Scripting vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the image parameter in the profile.php component...

Petrol Pump Management Software Cross-Site Scripting Vulnerability

Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. A cross-site scripting vulnerability exists in Petrol Pump Management Software version v.1.0, which originates from a vulnerability that allows an attacker to execute arbitrary code with a...

CVE-2024-27747

File Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email Image parameter in the profile.php component...

JPShop Code Issue Vulnerability

JPShop is an open source community group buying micro mall applet. A code issue vulnerability exists in Juanpao JPShop version 1.5.02 and prior versions, which stems from an incorrect manipulation of the parameter imgage that can lead to unrestricted uploads...

PT-2024-15585 · Unknown · Code-Projects Fighting Cock Information System

Name of the Vulnerable Software and Affected Versions: code-projects Fighting Cock Information System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /admin/action/new-father.php. The manipulation of the image argument leads t...

CVE-2023-45878

GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubricsvisualisesaveAjax.phps does not require authentication. The endpoint accepts the img, path, and gibbonPersonID parameters. The img parameter is expected to be a base64 encoded image. If the path parameter is set...

PT-2023-32129 · Beijing Baichuo · Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform

Name of the Vulnerable Software and Affected Versions: Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform versions up to 20230928 Description: A critical vulnerability was found in the Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent...

CVE-2023-32670 BuddyBoss XSS vulnerability

Cross-Site Scripting vulnerability in BuddyBoss 2.2.9 version , which could allow a local attacker with basic privileges to execute a malicious payload through the "name=image.jpg" parameter, allowing to assign a persistent javascript payload that would be triggered when the associated image is...