542 matches found
CVE-2024-40548: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the component /admin/cmsTemplate/save of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-40551: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the component /admin/cmsTemplate/doUpload of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-40547: Improper Access Control
PublicCMS v4.0.202302.e was discovered to contain an arbitrary file content replacement vulnerability via the component /admin/cmsTemplate/replace...
CVE-2024-40547
PublicCMS v4.0.202302.e was discovered to contain an arbitrary file content replacement vulnerability via the component /admin/cmsTemplate/replace...
CVE-2024-40546
An arbitrary file upload vulnerability in the component /admin/cmsWebFile/save of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-40543
CVE-2024-40543 affects PublicCMS v4.0.202302.e and is caused by a Server-Side Request Forgery (SSRF) via the /admin/ueditor?action=catchimage component. Public sources in Red Hat, OSV, NVD, CNNVD and PT-Research describe the flaw as enabling the server to forge requests. The connected documents c...
CVE-2024-40546: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the component /admin/cmsWebFile/save of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-40551
An arbitrary file upload vulnerability in the component /admin/cmsTemplate/doUpload of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-40552
PublicCMS v4.0.202302.e was discovered to contain a remote commande execution RCE vulnerability via the cmdarray parameter at /site/ScriptComponent.java...
CVE-2024-40547
PublicCMS v4.0.202302.e contains an arbitrary file content replacement vulnerability reachable via the /admin/cmsTemplate/replace endpoint. Affects the PublicCMS 4.0.202302.e release; root cause details describe arbitrary file content replacement through the specified API. Impact is privacy/integ...
CVE-2024-40548
PublicCMS 4.0.202302.e contains an arbitrary file upload flaw in /admin/cmsTemplate/save that can lead to arbitrary code execution when a crafted file is uploaded. The CVSSv3.1 base score is 8.8 (HIGH) with network access, low attack complexity, and require low privileges. Exploitation status is ...
CVE-2024-40546
PublicCMS v4.0.202302.e contains an arbitrary file upload vulnerability in the /admin/cmsWebFile/save component that allows an attacker to execute arbitrary code by uploading a crafted file. CVSS v3.1 shows high impact (C, I, A), with network access, low attack complexity, and privileges required...
CVE-2024-40544: Server-Side Request Forgery (SSRF)
PublicCMS v4.0.202302.e was discovered to contain a Server-Side Request Forgery SSRF via the component /admin/maintenancesysTask/edit...
CVE-2024-40549: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlace of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-40549
An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlace of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file...
PT-2024-28909
Name of the Vulnerable Software and Affected Versions PublicCMS version 4.0.202302.e Description The issue is related to a Server-Side Request Forgery SSRF that can be exploited via the component /admin/maintenance sysTask/edit. Recommendations For PublicCMS version 4.0.202302.e, consider...
PublicCMS Code Issues Vulnerabilities
PublicCMS is an open source content management system CMS written in Java by PublicCMS China. A code issue vulnerability exists in PublicCMS version v4.0.202302.e, which stems from vulnerability to server-side request forgery attacks...
CVE-2024-40546
An arbitrary file upload vulnerability in the component /admin/cmsWebFile/save of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-40545
CVE-2024-40545 affects PublicCMS v4.0.202302.e, with an arbitrary file upload vulnerability in the /admin/cmsWebFile/doUpload component that can allow arbitrary code execution through a crafted file. Public details show high impact (C/H/I/A) and are supported by multiple sources (NVD/CNA) with CV...