4 matches found
Drag-and-Drop-Multiple-File-Uploader-PRO-Path-Traversal
CVE-2023-1112 - Drag and Drop Multiple File Uploader PRO - Contact Form 7 v5.0.6.1 Path Traversal Info Path Traversal in Drag and Drop Multiple File Uploader PRO - Contact Form 7 version 5.0.6.1 allows unauthenticated remote attacker to upload files anywhere writable on the remote server...
CVE-2025-64512
Make sure to fill the parameter i.e Target and Uploaddir...
CVE-2026-24486
Python-Multipart is a streaming multipart parser for Python. Prior to version 0.0.22, a Path Traversal vulnerability exists when using non-default configuration options "UPLOADDIR" and "UPLOADKEEPFILENAME=True". An attacker can write uploaded files to arbitrary locations on the filesystem by...
CVE-2026-24486: Improper Limitation of a Pathname to a Restricted Directory
Python-Multipart is a streaming multipart parser for Python. Prior to version 0.0.22, a Path Traversal vulnerability exists when using non-default configuration options UPLOADDIR and UPLOADKEEPFILENAME=True. An attacker can write uploaded files to arbitrary locations on the filesystem by crafting...