252 matches found
EUVD-2022-5869
Malicious code in bioql PyPI...
CVE-2023-0783
A vulnerability was found in EcShop 4.1.5. It has been classified as critical. This affects an unknown part of the file /ecshop/admin/template.php of the component PHP File Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-29405: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the component /admin/template.php of emlog pro 2.5.0 and pro 2.5. allows attackers to execute arbitrary code via uploading a crafted PHP file...
CVE-2025-29405
An arbitrary file upload vulnerability in the component /admin/template.php of emlog pro 2.5.0 and pro 2.5. allows attackers to execute arbitrary code via uploading a crafted PHP file...
PT-2025-8944
Name of the Vulnerable Software and Affected Versions SUCMS version 1.0 Description The issue allows attackers to execute a directory traversal and arbitrary file deletion via a crafted GET request. This is due to a problem in the component admin template.php. Recommendations For SUCMS version 1....
PT-2023-29309
Name of the Vulnerable Software and Affected Versions SeaCMS version 12.8 Description An issue in the software allows an attacker to execute arbitrary code via the admin template.php component. Recommendations For SeaCMS version 12.8, at the moment, there is no information about a newer version...
CVE-2023-37049
emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php...
Arbitrary file deletion
emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php...
CVE-2023-37049
CVE-2023-37049 affects emlog 2.1.9, where an Arbitrary file deletion vulnerability exists via the admin/template.php endpoint. The connected sources confirm the affected software and the underlying issue (unauthorized deletion of files through a web-accessible admin path). No concrete exploit det...
CVE-2023-37049
emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php...
CVE-2023-37049
emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php...
CVE-2023-37049: Missing Authorization
emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php...
CVE-2023-30264
CLTPHP =6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via application/admin/controller/Template.php:update...
Unrestricted file upload
CLTPHP =6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via application/admin/controller/Template.php:update...
CVE-2023-30264
CLTPHP =6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via application/admin/controller/Template.php:update...
CVE-2023-30264: Unrestricted Upload of File with Dangerous Type
CLTPHP =6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via application/admin/controller/Template.php:update...
PT-2023-22614
Name of the Vulnerable Software and Affected Versions CLTPHP versions prior to 6.1 Description The issue concerns an unrestricted upload of files with dangerous types. This is possible via the application/admin/controller/Template.php update function. Recommendations For versions prior to 6.1,...
CVE-2023-30269
CLTPHP =6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php...