CVE-2020-29607

Alienfader Exploit / Alien@shell Webshell Upload Exploit الوصف: يستغل هذا النص البرمجي المكتوب بلغة Python ثغرة تجاوز قيود رفع الملفات في Pluck CMS على سبيل المثال، الإصدارات السابقة لـ 4.7.13 لرفع شل PHP. بمجرد رفعه، يمكن استخدام الشل المسماة "shell.phar" لتنفيذ الأوامر على الخادم الهدف. يقوم ال...

CVE-2025-3515

CVE-2025-3515 CVE‑2025‑3515 — السحب والإفلات لرفع ملفات متعددة لنموذج الاتصال 7 Contact Form 7 الوصف: رفع ملفات عشوائي عبر إضافة drag‑and‑drop‑multiple‑file‑upload‑contact‑form‑7 ≤1.3.8.9 يسمح برفع ملفات .phar، مما يؤدي إلى تنفيذ تعليمات برمجية عن بُعد في Apache+modphp...

CVE-2024-33438

رفع ملف تعسفي يؤدي إلى تنفيذ تعليمات برمجية عن بُعد CVE-2024-33438 CubeCart بعد تشغيله، هذا هو المخرجات المتوقعة لاستغلال ناجح: root@kitploit: python3 CubeCartCVE.py http://localhost/admin0Kqnr9.php admin 123456 whoami ,----. ||/ '. / O|| /| / "" / / // / launching exploit ||/ please wait... +...

CVE-2023-3824

PoC d'un fichier Phar malveillant en PHP CVE-2023-3824 Description Cette preuve de concept PoC démontre comment créer un fichier Phar malveillant en PHP et déclencher une vulnérabilité de débordement de tampon. Utilisation Création du fichier Phar malveillant 1. Créez un nouveau fichier PHP par...

elFinder < 2.1.58 - Remote Code Execution

studio-42/elfinder before 2.1.58 contains a remote code execution caused by execution of PHP code in a .phar file, letting attackers execute arbitrary PHP code if the server parses .phar files as PHP, exploit requires server to parse .phar files as PHP. id: CVE-2021-23394 info: name: elFinder...

CVE-2020-29607

استغلال CVE-2020-29607 عنوان الاستغلال: Pluck CMS 4.7.13 - رفع ملف يؤدي إلى تنفيذ تعليمات برمجية عن بُعد مصادق عليه وصف CVE: وجود ثغرة في تجاوز قيود رفع الملفات في Pluck CMS قبل الإصدار 4.7.13 تسمح لمستخدم بصلاحيات مدير بالوصول إلى المضيف من خلال وظيفة "إدارة الملفات"، مما قد يؤدي إلى تنفيذ تعليم...

EUVD-2026-71712

An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading a crafted .phar file...

CVE-2026-78839

CVE-2026-78839 Description Une vulnérabilité de téléversement arbitraire de fichier dans AppNitro MachForm v30 permet à des attaquants d'exécuter du code arbitraire en téléversant un fichier .phar spécialement conçu. L'exploitation réussie de ce problème nécessite deux conditions pratiques...

CVE-2026-23697

Vtiger CRM before 8.4.0 is vulnerable to an authenticated file upload RCE via the Documents module. An attacker with low privileges can upload a .phar file containing arbitrary PHP code, bypassing the extension denylist in config.inc.php (which omits .phar). The uploaded file is stored with its o...

CLSA-2026-1777946242 php: Fix of 13 CVEs

CVE-2018-14883: fix int overflow leading to heap overflow in exifthumbnailextract - CVE-2019-6977: fix imagecolormatch out-of-bounds write on heap in GD - CVE-2019-9022: fix memcpy with negative length via crafted DNS response - CVE-2019-9640: fix invalid read in exifprocessSOFn - CVE-2019-11042:...

CVE-2026-25524

OpenMage LTS (Magento LTS unofficial fork) before v20.17.0 is affected by a Phar deserialization flaw. PHP functions getimagesize(), file_exists(), and is_readable() can deserialize when given phar:// stream wrapper paths, used during image validation/media handling with controllable file paths. ...

CVE-2021-33352

An issue in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitrary code via a phar file upload in the ticket message field...

CVE-2021-28998

File upload vulnerability in CMS Made Simple through 2.2.15 allows remote authenticated attackers to gain a webshell via a crafted phar file...

CVE-2019-16317

In Pimcore before 5.7.1, an attacker with limited privileges can trigger execution of a .phar file via a phar:// URL in a filename parameter, because PHAR uploads are not blocked and are reachable within the phar://../../../../../../../../var/www/html/web/var/assets/ directory, a different...

CVE-2023-53952 Dotclear 2.25.3 Authenticated Remote Code Execution via File Upload

Dotclear 2.25.3 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files with .phar extension through the blog post creation interface. Attackers can upload files containing PHP system commands that execute when the uploaded file is accessed...

CVE-2023-53924

UliCMS 2023.1-sniffing-vicuna contains a remote code execution vulnerability that allows authenticated attackers to upload PHP files with .phar extension during profile avatar upload. Attackers can trigger code execution by visiting the uploaded file's location, enabling system command execution...

CVE-2023-53924

UliCMS 2023.1-sniffing-vicuna contains a remote code execution vulnerability that allows authenticated attackers to upload PHP files with .phar extension during profile avatar upload. Attackers can trigger code execution by visiting the uploaded file's location, enabling system command execution...

CVE-2023-53921

SitemagicCMS 4.4.3 contains a remote code execution vulnerability that allows attackers to upload malicious PHP files to the files/images directory. Attackers can upload a .phar file with system command execution payload to compromise the web application and execute arbitrary system commands...

CVE-2023-53889

Perch CMS 3.2 contains a remote code execution vulnerability that allows authenticated administrators to upload arbitrary PHP files through the assets management interface. Attackers can upload a malicious .phar file with embedded system command execution capabilities to execute arbitrary command...

Serendipity 代码问题漏洞

Serendipity is a PHP-based blogging system by the Serendipity team. The system supports the creation of online journals, blogs, web pages, and more. A code issue vulnerability exists in Serendipity version 2.4.0, which stems from an authenticated attacker being able to upload malicious PHP files...