PT-2025-3870 · Starsea99 · Starsea-Mall

Name of the Vulnerable Software and Affected Versions: StarSea99 starsea-mall version 1.0 Description: A critical vulnerability affects the UploadController function of the file src/main/java/com/siro/mall/controller/common/uploadController.java. The manipulation of the file argument leads to...

CVE-2024-13210 donglight bookstore电商书城系统说明 AdminBookController. java uploadPicture unrestricted upload

A vulnerability was found in donglight bookstore电商书城系统说明 1.0. It has been declared as critical. Affected by this vulnerability is the function uploadPicture of the file src/main/java/org/zdd/bookstore/web/controller/admin/AdminBookController. java. The manipulation of the argument pictureFile lea...

CVE-2024-13191

A vulnerability, which was classified as critical, has been found in ZeroWdd myblog 1.0. This issue affects the function upload of the file src/main/java/com/wdd/myblog/controller/admin/uploadController.java. The manipulation of the argument file leads to unrestricted upload. The attack may be...

PT-2025-2031 · Unknown · Zhenfeng13 My-Blog

Name of the Vulnerable Software and Affected Versions: zhenfeng13 My-Blog version 1.0 Description: A critical vulnerability was found in the upload function of the file src/main/java/com/site/blog/my/core/controller/admin/uploadController.java. The manipulation of the file argument leads to...

CVE-2024-52958

The CVE-2024-52958 entry concerns iota C.ai Conversational Platform (versions 1.0.0–2.1.3) with an issue in plugin management: improper verification of cryptographic signatures. This vulnerability enables remote authenticated users to load a malicious DLL via the plugin upload function. The CVSS-...

CVE-2024-11138

A vulnerability classified as problematic has been found in DedeCMS 5.7.116. This affects an unknown part of the file /dede/uploads/dede/friendlinkadd.php. The manipulation of the argument logoimg leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been...

PT-2024-16527 · Unknown · Codezips Online Institute Management System

Name of the Vulnerable Software and Affected Versions: Codezips Online Institute Management System versions up to 1.0 Description: A critical vulnerability was found in the Codezips Online Institute Management System. This issue affects unknown code of the file /profile.php. The manipulation of t...

SAS Studio 安全漏洞

SAS Studio is a Web browser-based programming environment from SAS. A security vulnerability exists in SAS Studio version 9.4 that originates from allowing a remote attacker to upload malicious files...

CVE-2024-10120

A vulnerability has been found in wfh45678 Radar up to 1.0.8 and classified as critical. This vulnerability affects unknown code of the file /services/v1/common/upload. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

CVE-2024-9855

A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM 1.3.8. It has been declared as critical. Affected by this vulnerability is the function uploadFile of the file /admin/SysModule/upload/ajaxmodel/upload/uploadfilepath/sysmodule1 of the component Module Plug-In Handler. The manipulation...

CVE-2024-9816

A vulnerability was found in Codezips Tourist Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/change-image.php. The manipulation of the argument packageimage leads to unrestricted upload. The attack may be launched remotely...

CVE-2024-9815

A vulnerability has been found in Codezips Tourist Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/create-package.php. The manipulation of the argument packageimage leads to unrestricted upload. The attack can be...

CVE-2024-9816

Codezips Tourist Management System 1.0 contains a vulnerability in /admin/change-image.php where the packageimage parameter allows unrestricted file upload. Exploitation is remotely possible and the exploit has been disclosed publicly. The issue is documented across CVE-2024-9816 entries (NVD/Red...

PT-2024-39536 · Unknown · Huankemao Scrm

Name of the Vulnerable Software and Affected Versions: HuankeMao SCRM versions up to 0.0.3 Description: A critical issue has been found in the Administrator Backend component, specifically in the function upload domain verification file of the file WxkConfig.php. The manipulation of the argument...

CVE-2024-9036

CVE-2024-9036 affects itsourcecode Online Bookstore 1.0. The issue is a vulnerability in admin_add.php, where manipulation of the image parameter allows unrestricted file upload. This could enable remote exploitation; multiple sources note the exploit has been disclosed publicly. No remediation d...

Online Traffic Offense 1.0 CSRF / Arbitrary File Upload

============================================================================================================================================= | Title : Online Traffic Offense 1.0 Auth by Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0.3...

Water Billing Management System 1.0 Cross Site Request Forgery / File Upload

============================================================================================================================================= | Title : Water Billing Management System 1.0 CSRF Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0....

CVE-2024-8296

FeehiCMS up to version 2.1.1 is affected by a vulnerability in the insert function (/admin/index.php?r=user%2Fcreate) where manipulating User[avatar] enables unrestricted file upload. The issue can be triggered remotely and, per the sources, the exploit has been disclosed publicly. Vendor has rep...

CVE-2024-8294

A vulnerability, which was classified as critical, was found in FeehiCMS up to 2.1.1. This affects the function update of the file /admin/index.php?r=friendly-link%2Fupdate. The manipulation of the argument FriendlyLinkimage leads to unrestricted upload. It is possible to initiate the attack...

CVE-2024-8166

A vulnerability has been found in Ruijie EG2000K 11.16B2 and classified as critical. This vulnerability affects unknown code of the file /tool/index.php?c=download&a=save. The manipulation of the argument content leads to unrestricted upload. The attack can be initiated remotely. The exploit has...