3418 matches found
Cleo < 5.8.0.24 Unrestricted File Upload
Cleo Harmony prior to 5.8.0.24, VLTrader prior to 5.8.0.24 and LexiCom prior to 5.8.0.24 are affected by a vulnerability allowing an unauthenticated attacker to upload an arbitrary file that could lead to remote code execution. No source data...
CVE-2024-56054
Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplmsplugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through 1.9.9.5.2...
CVE-2024-56057 WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplmsplugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through 1.9.9.5.2...
Ivanti Avalanche < 6.4.3.602 Unrestriceted File upload Vulnerability
The version of Ivanti Avalanche running on the remote host is prior to 6.4.3.602. It is, therefore, is affected by a vulnerability as referenced in the CVE-2024-29848 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version...
CVE-2024-12478
A vulnerability was found in InvoicePlane up to 1.6.1. It has been declared as critical. This vulnerability affects the function uploadfile of the file /index.php/upload/uploadfile/1/1. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The...
CVE-2024-12478 InvoicePlane 1 upload_file unrestricted upload
A vulnerability was found in InvoicePlane up to 1.6.1. It has been declared as critical. This vulnerability affects the function uploadfile of the file /index.php/upload/uploadfile/1/1. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The...
VulnCheck KEV: CVE-2024-55956
Cleo Harmony, VLTrader, and LexiCom, which are managed file transfer products, contain an unrestricted file upload vulnerability that could allow an unauthenticated user to import and execute arbitrary bash or PowerShell commands on the host system by leveraging the default settings of the...
PT-2024-35938 · Genetech · Pie Register Premium
Name of the Vulnerable Software and Affected Versions: Pie Register Premium versions prior to 3.8.3.3 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the Genetech Pie Register Premium. This allows for the upload of files with potentially...
CVE-2024-54214
CVE-2024-54214 describes an unrestricted/unauthenticated upload of files with dangerous types in the WordPress Revy plugin (versions <= 1.18). The vulnerability enables uploading a web shell to the web server, with CVSSv3.1 score reported as 10.0 (critical). Public references in connected docs...
VulnCheck KEV: CVE-2023-4220
Unrestricted file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS = v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell...
CVE-2024-40744
Unrestricted file upload via security bypass in Convert Forms component for Joomla in versions before 4.4.8...
CVE-2024-40744
Unrestricted file upload via security bypass in Convert Forms component for Joomla in versions before 4.4.8...
CVE-2024-40744 Extension - tassos.gr - Unrestricted file upload in Convert Forms component for Joomla < 4.4.8
Unrestricted file upload via security bypass in Convert Forms component for Joomla in versions before 4.4.8...
CVE-2024-40744
CVE-2024-40744 affects the Joomla extension Convert Forms; versions prior to 4.4.8 are vulnerable. The issue is an unrestricted file upload via a security bypass in the Convert Forms component, enabling potential malicious uploads. The vulnerability is high impact (per CVSS 3.1: AV:N/AC:L/PR:N/UI...
CVE-2024-40744 Extension - tassos.gr - Unrestricted file upload in Convert Forms component for Joomla < 4.4.8
Unrestricted file upload via security bypass in Convert Forms component for Joomla in versions before 4.4.8...
PT-2024-29023 · Joomla · Convert Forms
Name of the Vulnerable Software and Affected Versions: Convert Forms component for Joomla versions prior to 4.4.8 Description: The issue is related to an unrestricted file upload via a security bypass in the Convert Forms component for Joomla. This allows for potential malicious file uploads...
CVE-2024-25020
IBM Cognos Controller 11.0.0 and 11.0.1 is vulnerable to malicious file upload by allowing unrestricted filetype attachments in the Journal entry page. Attackers can make use of this weakness and upload malicious executable files into the system and can be sent to victims for performing further...
CVE-2024-11979 Interinfo DreamMaker - Unrestricted File Upload through Path Traversal
DreamMaker from Interinfo has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells...
CVE-2024-11979 Interinfo DreamMaker - Unrestricted File Upload through Path Traversal
DreamMaker from Interinfo has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells...
CVE-2024-11979
DreamMaker from Interinfo is affected by a Path Traversal vulnerability that does not restrict uploaded file types, enabling unauthenticated remote attackers to upload arbitrary files to arbitrary directories and achieve arbitrary code execution via webshells. This is confirmed across multiple so...