CVE-2025-3515

CVE-2025-3515 CVE‑2025‑3515 — Перетаскивание и загрузка нескольких файлов для Contact Form 7 Описание: Произвольная загрузка файлов через плагин drag‑and‑drop‑multiple‑file‑upload‑contact‑form‑7 версии ≤1.3.8.9 позволяет загружать файлы .phar, что приводит к удаленному выполнению кода в...

CVE-2024-33438

임의 파일 업로드로 인한 RCE CVE-2024-33438 CubeCart 실행 후, 성공적인 악용에 대한 예상 출력은 다음과 같습니다: root@kitploit: python3 CubeCartCVE.py http://localhost/admin0Kqnr9.php admin 123456 whoami ,----. ||/ '. / O|| /| / "" / / // / launching exploit ||/ please wait... + Trying to log into the application... + Successful...

CVE-2023-3824

PHP 悪意のある Phar ファイル PoC CVE-2023-3824 説明 この Proof of Concept PoC は、PHP で悪意のある Phar ファイルを作成し、バッファオーバーフローの脆弱性を引き起こす方法を示しています。 使用方法 悪意のある Phar ファイルの作成 1. 新しい PHP ファイル（例：createphar.php）を作成し、次のコードを追加します: root@kitploit: startBuffering; $phar-addFromStringstrrepeat'A', PHPMAXPATHLEN - 1.'B', 'This is th...

elFinder < 2.1.58 - Remote Code Execution

studio-42/elfinder before 2.1.58 contains a remote code execution caused by execution of PHP code in a .phar file, letting attackers execute arbitrary PHP code if the server parses .phar files as PHP, exploit requires server to parse .phar files as PHP. id: CVE-2021-23394 info: name: elFinder...

CVE-2020-29607

CVE-2020-29607-Exploit 익스플로잇 제목: Pluck CMS 4.7.13 - 파일 업로드 원격 코드 실행 인증됨 CVE 설명: Pluck CMS 4.7.13 이전 버전의 파일 업로드 제한 우회 취약점으로 인해 관리자 권한 사용자가 "파일 관리" 기능을 통해 호스트에 접근할 수 있으며, 이로 인해 원격 코드 실행이 발생할 수 있습니다. https://nvd.nist.gov/vuln/detail/CVE-2020-29607 ExploitDB: https://www.exploit-db.com/exploits/49909...

EUVD-2026-71712

An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading a crafted .phar file...

CVE-2026-78839

CVE-2026-78839 설명 AppNitro MachForm v30의 임의 파일 업로드 취약점으로, 공격자가 조작된 .phar 파일을 업로드하여 임의 코드를 실행할 수 있습니다. 이 문제를 성공적으로 악용하려면 두 가지 현실적인 전제 조건이 필요합니다. 첫째, 공격자는 .phar 파일 업로드를 허용하도록 구성된 기존 양식을 식별하거나, 양식의 허용 확장자를 직접 편집할 수 있는 충분한 접근 권한을 보유해야 합니다. 둘째, 공격자는 업로드된 파일에 할당된 MD5 해시를 알아내어 해당 파일을 검색하고 실행할 수 있어야 합니다...

CVE-2020-29607

Exploit Alienfader / Exploit de téléchargement de webshell Alien@shell Description : Ce script Python exploite une vulnérabilité de contournement de restriction de téléchargement de fichiers dans Pluck CMS par exemple, versions antérieures à 4.7.13 pour télécharger un webshell PHP. Une fois...

CVE-2026-23697

Vtiger CRM before 8.4.0 is vulnerable to an authenticated file upload RCE via the Documents module. An attacker with low privileges can upload a .phar file containing arbitrary PHP code, bypassing the extension denylist in config.inc.php (which omits .phar). The uploaded file is stored with its o...

CLSA-2026-1777946242 php: Fix of 13 CVEs

CVE-2018-14883: fix int overflow leading to heap overflow in exifthumbnailextract - CVE-2019-6977: fix imagecolormatch out-of-bounds write on heap in GD - CVE-2019-9022: fix memcpy with negative length via crafted DNS response - CVE-2019-9640: fix invalid read in exifprocessSOFn - CVE-2019-11042:...

CVE-2026-25524

OpenMage LTS (Magento LTS unofficial fork) before v20.17.0 is affected by a Phar deserialization flaw. PHP functions getimagesize(), file_exists(), and is_readable() can deserialize when given phar:// stream wrapper paths, used during image validation/media handling with controllable file paths. ...

CVE-2021-33352

An issue in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitrary code via a phar file upload in the ticket message field...

CVE-2021-28998

File upload vulnerability in CMS Made Simple through 2.2.15 allows remote authenticated attackers to gain a webshell via a crafted phar file...

CVE-2019-16317

In Pimcore before 5.7.1, an attacker with limited privileges can trigger execution of a .phar file via a phar:// URL in a filename parameter, because PHAR uploads are not blocked and are reachable within the phar://../../../../../../../../var/www/html/web/var/assets/ directory, a different...

CVE-2023-53952 Dotclear 2.25.3 Authenticated Remote Code Execution via File Upload

Dotclear 2.25.3 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files with .phar extension through the blog post creation interface. Attackers can upload files containing PHP system commands that execute when the uploaded file is accessed...

CVE-2023-53924

UliCMS 2023.1-sniffing-vicuna contains a remote code execution vulnerability that allows authenticated attackers to upload PHP files with .phar extension during profile avatar upload. Attackers can trigger code execution by visiting the uploaded file's location, enabling system command execution...

CVE-2023-53924

UliCMS 2023.1-sniffing-vicuna contains a remote code execution vulnerability that allows authenticated attackers to upload PHP files with .phar extension during profile avatar upload. Attackers can trigger code execution by visiting the uploaded file's location, enabling system command execution...

CVE-2023-53921

SitemagicCMS 4.4.3 contains a remote code execution vulnerability that allows attackers to upload malicious PHP files to the files/images directory. Attackers can upload a .phar file with system command execution payload to compromise the web application and execute arbitrary system commands...

CVE-2023-53889

Perch CMS 3.2 contains a remote code execution vulnerability that allows authenticated administrators to upload arbitrary PHP files through the assets management interface. Attackers can upload a malicious .phar file with embedded system command execution capabilities to execute arbitrary command...

Serendipity 代码问题漏洞

Serendipity is a PHP-based blogging system by the Serendipity team. The system supports the creation of online journals, blogs, web pages, and more. A code issue vulnerability exists in Serendipity version 2.4.0, which stems from an authenticated attacker being able to upload malicious PHP files...