CVE-2025-46384

CWE-434 Unrestricted Upload of File with Dangerous Type...

CVE-2025-46384

CWE-434 Unrestricted Upload of File with Dangerous Type...

CVE-2025-46384

CVE-2025-46384 corresponds to an Unrestricted Upload of File with Dangerous Type affecting Emby products (notably Emby Windows and Emby Server <= 4.8). Technical details across connected sources indicate a file-upload vulnerability that can allow remote execution by uploading crafted files. So...

CVE-2025-7880

The CVE-2025-7880 entry concerns Metasoft MetaCRM (versions up to 6.4.2). The vulnerability lies in the file /business/common/sms/sendsms.jsp, where manipulating the File argument enables unrestricted file upload. This is described as a remote attack with a disclosed exploit; the vulnerability is...

CVE-2025-7877

A vulnerability, which was classified as critical, has been found in Metasoft 美特软件 MetaCRM up to 6.4.2. This issue affects some unknown processing of the file sendfile.jsp. The manipulation of the argument File leads to unrestricted upload. The attack may be initiated remotely. The exploit has be...

CVE-2025-7864 thinkgem JeeSite FileUploadController.java upload unrestricted upload

A vulnerability was found in thinkgem JeeSite up to 5.12.0. It has been classified as critical. This affects the function Upload of the file src/main/java/com/jeesite/modules/file/web/FileUploadController.java. The manipulation leads to unrestricted upload. It is possible to initiate the attack...

CVE-2025-7864

Thinkgem JeeSite (versions up to 5.12.0) has a vulnerability in the Upload function of FileUploadController.java that allows unrestricted file uploads. The issue can be exploited remotely and exploitation has been disclosed publicly. A patch is available with identifier 3585737d21fe490ff6948d913f...

PT-2025-30205 · Codecanyon · Identsoft

Name of the Vulnerable Software and Affected Versions: Codecanyon iDentSoft version 2.0 Description: A critical issue exists in Codecanyon iDentSoft 2.0, specifically within the Account Setting Page. The vulnerability allows for unrestricted file upload through manipulation of the photo argument ...

PT-2025-30179 · Metacrm · Metacrm

Name of the Vulnerable Software and Affected Versions: Metasoft MetaCRM versions up to 6.4.2 Description: A critical vulnerability exists in Metasoft MetaCRM. The issue involves unrestricted file upload due to manipulation of the File argument within the processing of the sendfile.jsp file. This...

PT-2025-30216 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RuoYi versions up to 4.8.1 Description: A critical issue exists in the uploadFile function located in the file ruoyi-admin/src/main/java/com/ruoyi/web/controller/common/CommonController.java. Manipulation of the File argument leads to...

PT-2025-30180 · Metasoft · Metasoft Metacrm

Name of the Vulnerable Software and Affected Versions: Metasoft MetaCRM versions up to 6.4.2 Description: A critical vulnerability exists in Metasoft MetaCRM up to version 6.4.2. The issue involves an unrestricted file upload vulnerability located in an unknown function of the...

CVE-2025-7755 code-projects Online Ordering System edit_product.php unrestricted upload

A vulnerability was found in code-projects Online Ordering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/editproduct.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotely. The explo...

WordPress plugin Medical Prescription Attachment Plugin for WooCommerce 代码问题漏洞

WordPress Medical Prescription Attachment Plugin for WooCommerce is a plugin designed for WooCommerce, mainly used to help online pharmacies to realize the function of customers uploading doctor's prescription files in order to purchase medicines, vaccines and so on. WordPress Medical Prescriptio...

CVE-2025-7547

A vulnerability, which was classified as critical, was found in Campcodes Online Movie Theater Seat Reservation System 1.0. This affects the function savemovie of the file /admin/adminclass.php. The manipulation of the argument cover leads to unrestricted upload. It is possible to initiate the...

CVE-2025-7627

A vulnerability was found in YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd and classified as critical. Affected by this issue is the function fileUpload of the file /fileUpload. The manipulation of the argument File leads to unrestricted upload. The attack may be...

CVE-2025-7477

A vulnerability, which was classified as critical, has been found in code-projects Simple Car Rental System 1.0. This issue affects some unknown processing of the file /admin/addcars.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotely. Th...

CVE-2025-7470

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been classified as critical. Affected is an unknown function of the file /pages/productadd.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The...

CVE-2025-7547

CVE-2025-7547 affects Campcodes Online Movie Theater Seat Reservation System 1.0. A vulnerability in the /admin/admin_class.php save_movie function arises from manipulation of the cover parameter, causing unrestricted file upload. This enables remote exploitation and is described as a critical is...

CVE-2025-7547 Campcodes Online Movie Theater Seat Reservation System admin_class.php save_movie unrestricted upload

A vulnerability, which was classified as critical, was found in Campcodes Online Movie Theater Seat Reservation System 1.0. This affects the function savemovie of the file /admin/adminclass.php. The manipulation of the argument cover leads to unrestricted upload. It is possible to initiate the...

VulnCheck KEV: CVE-2020-27387

An unrestricted file upload issue in HorizontCMS through 1.0.0-beta allows an authenticated remote attacker with access to the FileManager to upload and execute arbitrary PHP code by uploading a PHP payload, and then using the FileManager's rename function to provide the payload which will receiv...