1006 matches found
File upload vulnerability in OFCMS backend ueditor uploadFIle
OFCMS is a content management system developed based on java technology. There is a file upload vulnerability in OFCMS backend ueditor uploadFIle, which can be exploited by attackers to upload webshell and gain server privileges, posing information leakage and operational security risks...
OFCMS backend editUploadImage method has file upload vulnerability
OFCMS is a content management system developed based on java technology. A file upload vulnerability exists in the editUploadImage method in the background of OFCMS, which can be exploited by an attacker to upload a webshell and gain access to the server, posing an information leakage and...
CVE-2018-18809 TIBCO JasperReports Library Directory Traversal Vulnerability
The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for...
The vulnerability of the scp file copy-to-external utility implementation lies in insufficient validation of input data, allowing a malicious actor to manipulate files in the client’s directory.
The vulnerability of the scp file copy utility implementation is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely from the server, to manipulate files in the client directory...
[SECURITY] [DLA 1692-1] phpmyadmin security update
Package : phpmyadmin Version : 4:4.2.12-2+deb8u5 CVE ID : CVE-2019-6799 Debian Bug : 920823 An information leak issue was discovered in phpMyAdmin. An attacker can read any file on the server that the web servers user can access. This is related to the mysql.allowlocalinfile PHP configuration. Wh...
File Upload Vulnerability in Ice OrderBox System
Ice point ordering treasure system is unit enterprise internal canteen ordering management software, through the cell phone APP WeChat ordering, for canteen ordering consumption management. A file upload vulnerability exists in Freezing Point Ordering System, which allows an attacker to upload a...
File Upload Vulnerability in Tongwang iOA Collaboration Office Platform
Tongwang iOA collaborative office platform is a collaborative office application platform. A file upload vulnerability exists in Tongwang iOA Collaboration Office Platform. It allows an attacker to upload a webshell and gain server privileges...
Zoho ManageEngine ServiceDesk Plus (SDP) Arbitrary File Upload
Exploit Title: Zoho ManageEngine ServiceDesk Plus SDP before 10.0 build 10012 - arbitrary file upload Date: 18-02-2019 Exploit Author: Dao Duy Hung [email protected] Vendor Homepage: https://www.manageengine.com/products/service-desk/ Software Link:...
Authentication Bypass in console-io
Affected versions of the console-io package do not configure the underlying websocket library to require authentication, resulting in an authentication bypass vulnerability. As console-io allows terminal access on the server via a web page, an authentication bypass is essentially remote code...
Command Execution Vulnerability in HDCMS v2.0
HDCMS is a content management system software package developed in PHP+Mysql. It provides customers with powerful and complete functionality to accomplish rapid website development. A command execution vulnerability exists in HDCMS v2.0, which can be exploited by an attacker to gain control of a...
Oracle MySQL Server Access Control Error Vulnerability (CNVD-2019-26711)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An access control error vulnerability exists in the MySQL Server component of Oracle MySQL, version 5.7.24 and earlier, and the Server: Optimizer...
CVE-2019-0029
Juniper ATP Series Splunk credentials are logged in a file readable by authenticated local users. Using these credentials an attacker can access the Splunk server. This issue affects Juniper ATP 5.0 versions prior to 5.0.3...
PT-2019-1324 · Oracle +6 · Mysql Server +5
Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 8.0.13 and prior Description: The issue is related to insufficient access control in the Server: DDL component of Oracle MySQL Server, allowing a remote attacker to cause a denial of service. Successful exploitati...
WordPress Plugin Sem-Wysiwyg Remote Upload Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A remote upload vulnerability exists in the WordPress plugin Sem-Wysiwyg. Allows an attacker to upload a webshell and gain...
WordPress Plugin Monsters-Editor-10-For-WP-Super-Edit Remote Upload Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A remote upload vulnerability exists in the WordPress plugin Monsters-Editor-10-For-WP-Super-Edit. Allows an attacker to uplo...
The vulnerability of the Mercuria version control software, related to access control errors, allows a violator to compromise data confidentiality and integrity.
The vulnerability of the Mercuria version control software is related to errors in access control on the server. Exploiting this vulnerability can allow a malicious actor to compromise data confidentiality and integrity...
RATELIMITED: HTTP PUT method enabled
Hi security team, Summary: It is possible to upload files to the server using the PUT method Steps To Reproduce: I used the following request: PUT /emitrani.txt HTTP/1.1 Host: ratelimited.me Content-Length: 10 Connection: close Now a file exists at https://ratelimited.me/emitrani.txt with content...
DOUPHP has a file upload vulnerability
DouPHP is a lightweight enterprise website management system based on PHP+Mysql architecture, running on various platforms such as Linux, Windows, MacOSX, Solaris and so on. DOUPHP suffers from a file upload vulnerability. The vulnerability is caused by the website upload function failing to...
