Lucene search
K

39 matches found

Vulnrichment
Vulnrichment
added 2024/03/17 11:0 a.m.16 views

CVE-2024-2561 74CMS Company Logo Index.php#sendCompanyLogo unrestricted upload

A vulnerability, which was classified as critical, has been found in 74CMS 3.28.0. Affected by this issue is the function sendCompanyLogo of the file /controller/company/Index.phpsendCompanyLogo of the component Company Logo Handler. The manipulation of the argument imgBase64 leads to unrestricte...

6.5CVSS6.5AI score0.19529EPSS
Exploits1References3
OSV
OSV
added 2024/02/23 3:15 p.m.1 views

CVE-2024-1818

A vulnerability was found in CodeAstro Membership Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /uploads/ of the component Logo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The...

7.2CVSS5.4AI score
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/02/23 2:31 p.m.13 views

CVE-2024-1818 CodeAstro Membership Management System Logo unrestricted upload

A vulnerability was found in CodeAstro Membership Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /uploads/ of the component Logo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The...

5.8CVSS6.9AI score0.00054EPSS
Exploits1References3
Cvelist
Cvelist
added 2024/02/23 2:31 p.m.14 views

CVE-2024-1818 CodeAstro Membership Management System Logo unrestricted upload

A vulnerability was found in CodeAstro Membership Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /uploads/ of the component Logo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The...

5.8CVSS5.2AI score0.00054EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/02/23 12:0 a.m.4 views

CodeAstro Membership Management System Code Issue Vulnerability

CodeAstro Membership Management System is a membership management system from CodeAstro. A code issue vulnerability exists in CodeAstro Membership Management System version 1.0, which stems from the component Logo Handler's file /uploads/ that can lead to unrestricted uploads...

7.2CVSS7AI score0.00054EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/02/23 12:0 a.m.2 views

PT-2024-18333 · Unknown · Codeastro Membership Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Membership Management System version 1.0 Description: A critical issue was found in the Logo Handler component, specifically affecting some unknown functionality of the file /uploads/. This issue leads to unrestricted upload. The...

7.2CVSS5.2AI score0.00054EPSS
Exploits1References5
BDU FSTEC
BDU FSTEC
added 2024/01/12 12:0 a.m.1 views

The vulnerability of the BMP Logo Handler component in the BIOS AMI AptioV configuration tool allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the BMP Logo Handler component in the BIOS AMI AptioV setup tool involves the unlimited loading of dangerous files. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS7.2AI score0.00012EPSS
Exploits0References3
OSV
OSV
added 2023/12/08 4:15 p.m.10 views

CVE-2023-6613

A vulnerability classified as problematic has been found in Typecho 1.2.1. Affected is an unknown function of the file /admin/options-theme.php of the component Logo Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclos...

4.8CVSS6AI score
Exploits0References3
NVD
NVD
added 2023/12/08 4:15 p.m.12 views

CVE-2023-6613

A vulnerability classified as problematic has been found in Typecho 1.2.1. Affected is an unknown function of the file /admin/options-theme.php of the component Logo Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclos...

4.8CVSS0.00057EPSS
Exploits1References3
Prion
Prion
added 2023/12/08 4:15 p.m.14 views

Cross site scripting

A vulnerability classified as problematic has been found in Typecho 1.2.1. Affected is an unknown function of the file /admin/options-theme.php of the component Logo Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclos...

3.3CVSS6.3AI score0.00057EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/08 3:31 p.m.12 views

CVE-2023-6613 Typecho Logo options-theme.php cross site scripting

A vulnerability classified as problematic has been found in Typecho 1.2.1. Affected is an unknown function of the file /admin/options-theme.php of the component Logo Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclos...

3.3CVSS6AI score0.00057EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/12/08 12:0 a.m.2 views

PT-2023-32715 · Typecho · Typecho

Name of the Vulnerable Software and Affected Versions: Typecho version 1.2.1 Description: A vulnerability has been found in the Logo Handler component of Typecho, affecting an unknown function of the file /admin/options-theme.php. This issue leads to cross site scripting and can be exploited...

4.8CVSS3.8AI score0.00057EPSS
Exploits1References8
Positive Technologies
Positive Technologies
added 2023/12/04 12:0 a.m.4 views

PT-2023-8204 · Ami · Ami Aptiov

Name of the Vulnerable Software and Affected Versions: AMI AptioV affected versions not specified Description: The issue is related to the BMP Logo Handler component in the AMI AptioV BIOS setup utility, which allows for an unrestricted upload of dangerous file types, including PNG logo files. Th...

7.8CVSS7.3AI score0.00469EPSS
Exploits0References10
NVD
NVD
added 2023/10/26 6:15 p.m.9 views

CVE-2023-5796

A vulnerability was found in CodeAstro POS System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /setting of the component Logo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been...

8.8CVSS7AI score0.00077EPSS
Exploits1References3
OSV
OSV
added 2023/10/26 6:15 p.m.2 views

CVE-2023-5796

A vulnerability was found in CodeAstro POS System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /setting of the component Logo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been...

8.8CVSS5.4AI score0.00077EPSS
Exploits1References3
Prion
Prion
added 2023/10/26 6:15 p.m.20 views

Out-of-bounds

A vulnerability was found in CodeAstro POS System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /setting of the component Logo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been...

6.5CVSS8.6AI score0.00077EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/26 5:31 p.m.13 views

CVE-2023-5796 CodeAstro POS System Logo setting unrestricted upload

A vulnerability was found in CodeAstro POS System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /setting of the component Logo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been...

6.5CVSS6.8AI score0.00077EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/10/26 12:0 a.m.3 views

PT-2023-32334 · Unknown · Codeastro Pos System

Name of the Vulnerable Software and Affected Versions: CodeAstro POS System version 1.0 Description: A critical issue affects some unknown functionality of the file /setting of the component Logo Handler, leading to unrestricted upload. The attack can be launched remotely. Recommendations: For...

8.8CVSS7.1AI score0.00077EPSS
Exploits1References7
CNNVD
CNNVD
added 2023/10/26 12:0 a.m.1 views

Pharmacy Point Of Sale System Code Issue Vulnerability

Pharmacy Point Of Sale System is a web-based application by Carlo Montero, an individual developer. It is used to help a pharmacy manage its sales transactions. A security vulnerability exists in Pharmacy Point Of Sale System version 1.0 due to the presence of an unknown function in the setting o...

8.8CVSS6.8AI score0.00077EPSS
Exploits1References4
Rows per page
Query Builder