PT-2025-28159 · Unknown · Code-Projects Online Note Sharing

Name of the Vulnerable Software and Affected Versions: code-projects Online Note Sharing version 1.0 Description: A critical issue has been discovered, affecting an unknown function of the file /dashboard/userprofile.php of the component Profile Image Handler. The manipulation of the image argume...

CVE-2025-6900: Unrestricted Upload of File with Dangerous Type

A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-book.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclos...

CVE-2025-6837: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical was found in code-projects Library System 1.0. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument image leads to unrestricted upload. The attack can be launched remotely. The exploit has been...

CVE-2025-6667: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in code-projects Car Rental System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/addcars.php. The manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. The exploit h...

CVE-2025-5406: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. Affected is an unknown function of the file /admin/posts.php?source=addpost. The manipulation of the argument image leads to unrestricted upload. It is possible t...

CVE-2025-1169: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Image Compressor Tool 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /image-compressor/compressor.php. The manipulation of the argument image leads to cross site scripting. The attack may be initiated...

CVE-2025-0460: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, was found in Blog Botz for Journal Theme 1.0 on OpenCart. This affects an unknown part of the file /index.php?route=extension/module/blogadd. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the atta...

CVE-2024-13140

A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.3. Affected is an unknown function of the file /admin/article.php?action=uploadcover of the component Cover Upload Handler. The manipulation of the argument image leads to cross site scripting. It is possible to launc...

CVE-2024-13140: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.3. Affected is an unknown function of the file /admin/article.php?action=uploadcover of the component Cover Upload Handler. The manipulation of the argument image leads to cross site scripting. It is possible to launc...

PT-2024-16685 · Unknown · Codezips Online Institute Management System

Name of the Vulnerable Software and Affected Versions: Codezips Online Institute Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /manage website.php. The manipulation of the website image argument leads to unrestricted...

PT-2024-16686

Name of the Vulnerable Software and Affected Versions Codezips Online Institute Management System version 1.0 Description A critical issue has been found in the system, affecting an unknown functionality of the file /edit user.php. The manipulation of the image argument leads to unrestricted...

CVE-2024-10766: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, has been found in Codezips Free Exam Hall Seating Management System 1.0. This issue affects some unknown processing of the file /pages/saveuser.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated...

PT-2024-16528 · Unknown · Codezips Free Exam Hall Seating Management System

Name of the Vulnerable Software and Affected Versions: Codezips Free Exam Hall Seating Management System version 1.0 Description: A critical issue has been found in the system, affecting the processing of the file /pages/save user.php. The manipulation of the image argument leads to unrestricted...

CVE-2024-9036: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in itsourcecode Online Bookstore 1.0. It has been rated as critical. This issue affects some unknown processing of the file adminadd.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotely. The exploit has been...

PT-2024-39380

Name of the Vulnerable Software and Affected Versions itsourcecode Online Bookstore version 1.0 Description A critical issue affects the processing of the file admin add.php, where the manipulation of the image argument leads to unrestricted upload. The attack can be initiated remotely...

CVE-2024-8409

A vulnerability classified as problematic has been found in ABCD ABCD2 up to 2.2.0-beta-1. This affects an unknown part of the file /common/showimage.php. The manipulation of the argument image leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has...

CVE-2024-8409: Path Traversal: '../filedir'

A vulnerability classified as problematic has been found in ABCD ABCD2 up to 2.2.0-beta-1. This affects an unknown part of the file /common/showimage.php. The manipulation of the argument image leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has...

PT-2024-38991

Name of the Vulnerable Software and Affected Versions: ABCD ABCD2 versions 2.2.0-beta-1 and earlier Description: A problematic issue has been found in ABCD ABCD2, affecting an unknown part of the file /common/show image.php. The manipulation of the image argument leads to path traversal, allowing...

PT-2024-38385 · Unknown · Laravel Accounting System

Name of the Vulnerable Software and Affected Versions: Laravel Accounting System version 1.0 Description: A critical issue was found in the Laravel Accounting System, affecting an unknown part of the file app/Http/Controllers/HomeController.php. The manipulation of the image argument leads to...

PT-2024-38226 · Unknown · Alton Management System

Name of the Vulnerable Software and Affected Versions: Alton Management System version 1.0 Description: A critical issue was found in the Alton Management System, affecting some unknown functionality of the file /admin/menu.php of the component Add a Menu. The manipulation of the image argument...