399 matches found
Monstra <= 3.0.4 File Upload Vulnerability (Sep 2021)
Monstra is prone to an unrestricted file upload vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:monstra:monstra";...
CVE-2021-40940
Monstra 3.0.4 does not filter the case of php, which leads to an unrestricted file upload vulnerability...
CVE-2021-40940
Monstra 3.0.4 does not filter the case of php, which leads to an unrestricted file upload vulnerability...
Unrestricted file upload
Monstra 3.0.4 does not filter the case of php, which leads to an unrestricted file upload vulnerability...
CVE-2021-40940
The provided connected sources confirm a concrete vulnerability in Monstra 3.0.4: an unrestricted file upload due to improper filtering of PHP-related uploads. Affected component is the web application (Monstra CMS) with PHP file handling as the root cause; impact is high (arbitrary file upload l...
CVE-2021-40940
Monstra 3.0.4 does not filter the case of php, which leads to an unrestricted file upload vulnerability...
Monstra CMS 代码问题漏洞
Monstra CMS is a lightweight PHP-based content management system CMS from the individual developer Sergey Romanenko in Ukraine. A security vulnerability exists in Monstra CMS version 3.0.4, which stems from the application's failure to filter php case, resulting in a lack of restrictions on file...
Monstra Remote Code Execution Vulnerability (CNVD-2021-94964)
Monstra is a lightweight content management system CMS. /admin/index.php?id=themes in Monstra version 3.0.4...
CVE-2021-36548
A remote code execution RCE vulnerability in the component /admin/index.php?id=themes&action=edittemplate&filename=blog of Monstra v3.0.4 allows attackers to execute arbitrary commands via a crafted PHP file...
CVE-2021-36548
A remote code execution RCE vulnerability in the component /admin/index.php?id=themes&action=edittemplate&filename=blog of Monstra v3.0.4 allows attackers to execute arbitrary commands via a crafted PHP file...
CVE-2021-36548
A remote code execution RCE vulnerability in the component /admin/index.php?id=themes&action=edittemplate&filename=blog of Monstra v3.0.4 allows attackers to execute arbitrary commands via a crafted PHP file...
Remote code execution
A remote code execution RCE vulnerability in the component /admin/index.php?id=themes&action=edittemplate&filename=blog of Monstra v3.0.4 allows attackers to execute arbitrary commands via a crafted PHP file...
CVE-2021-36548
A remote code execution RCE vulnerability in the component /admin/index.php?id=themes&action=edittemplate&filename=blog of Monstra v3.0.4 allows attackers to execute arbitrary commands via a crafted PHP file...
CVE-2021-36548
Monstra CMS v3.0.4 contains a remote code execution (RCE) vulnerability in the component /admin/index.php?id=themes&action=edit_template&filename=blog, allowing attackers to execute arbitrary commands via a crafted PHP file.
Monstra CMS 代码问题漏洞
Monstra is a lightweight content management system CMS. /admin/index.php?id=themes in Monstra version 3.0.4...
Monstra CMS code issue vulnerability
Monstra CMS is a lightweight PHP-based content management system CMS from the Ukrainian personal developer Sergey Romanenko.A code issue vulnerability exists in Monstra CMS v3.0.4, which could be exploited by attackers to execute arbitrary web scripts or HTML...
CVE-2020-20691
An issue in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via bypassing the file extension filter and uploading crafted HTML files...
CVE-2020-20691
An issue in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via bypassing the file extension filter and uploading crafted HTML files...