Placement Management System 代码问题漏洞

Placement Management System is an itsourcecode open source placement management system. A code issue exists in version 1.0 of the Placement Management System, which is caused by an unrestricted file upload vulnerability in the fileToUpload parameter of the Image Handler component of the...

Security Bulletin: IBM Information Governance Catalog is vulnerable to unrestricted file upload (CVE-2024-40705)

Summary An unrestricted file upload vulnerability in Information Governance Catalog was addressed. Vulnerability Details CVEID:CVE-2024-40705 DESCRIPTION: IBM Information Governance Catalog could allow an authenticated user to consume file space resources due to unrestricted file uploads. CVSS Ba...

CVE-2024-31411

CVE-2024-31411 concerns Apache StreamPipes, where an unrestricted upload of a dangerous file type is possible for authenticated/authorized users. The issue allows uploading potentially executable files, enabling remote code execution (RCE) on affected systems. Affected version: up to 0.93.0, with...

CVE-2024-6801

CVE-2024-6801 affects SourceCodester Online Student Management System 1.0. The issue is in the handling of the file parameter image on /add-students.php, where manipulation leads to unrestricted file upload. This allows remote attackers to upload arbitrary files, with potential for high-impact co...

PT-2024-37828 · Nanjing Xingyuantu Technology · Sparkshop

Name of the Vulnerable Software and Affected Versions: Nanjing Xingyuantu Technology SparkShop versions up to 1.1.6 Description: A critical issue affects the processing of the file "/api/Common/uploadFile". The manipulation of the file argument leads to unrestricted upload. The attack can be...

CVE-2024-37555

Unrestricted Upload of File with Dangerous Type vulnerability in ZealousWeb Generate PDF using Contact Form 7.This issue affects Generate PDF using Contact Form 7: from n/a through 4.0.6...

CVE-2024-34692 [CVE-2024-34692] Unrestricted File upload vulnerability in SAP Enable Now

Due to missing verification of file type or content, SAP Enable Now allows an authenticated attacker to upload arbitrary files. These files include executables which might be downloaded and executed by the user which could host malware. On successful exploitation an attacker can cause limited...

Exploit for Unrestricted Upload of File with Dangerous Type in Chamilo Chamilo_Lms

Chamilo-LMS-CVE-2023-4220-Exploit This is an Exploit for Unres...

VulnCheck KEV: CVE-2024-37418

Unrestricted Upload of File with Dangerous Type vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through = 4.4.6...

Progress Software WhatsUp Gold CommunityController Unrestricted File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software WhatsUp Gold. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CommunityController class. The issue results from the lack of proper...

CVE-2024-37762

MachForm up to version 21 is affected by an authenticated unrestricted file upload which leads to a remote code execution...

CVE-2024-37762

MachForm up to version 21 is affected by an authenticated unrestricted file upload which leads to a remote code execution...

Machform Security Vulnerabilities

Machform is an online questionnaire program. A security vulnerability exists in Machform version 21 and prior versions, which stems from being affected by an authenticated unrestricted file upload and can lead to remote code execution...

Online Food Ordering System Code Issue Vulnerability

Online Food Ordering System is an online food ordering system developed by Carlo Montero, an individual developer. A code issue exists in version 1.0 of the Online Food Ordering System due to an unrestricted file upload vulnerability in the /addproduct.php file...

CVE-2024-5008 WhatsUp Gold APM Unrestricted File Upload Remote Code Execution Vulnerability

In WhatsUp Gold versions released before 2023.1.3, an authenticated user with certain permissions can upload an arbitrary file and obtain RCE using Apm.UI.Areas.APM.Controllers.Api.Applications.AppProfileImportController...

CVE-2024-5008 WhatsUp Gold APM Unrestricted File Upload Remote Code Execution Vulnerability

In WhatsUp Gold versions released before 2023.1.3, an authenticated user with certain permissions can upload an arbitrary file and obtain RCE using Apm.UI.Areas.APM.Controllers.Api.Applications.AppProfileImportController...

CVE-2024-4197

An unrestricted file upload vulnerability in Avaya IP Office was discovered that could allow remote command or code execution via the One-X component. Affected versions include all versions prior to 11.1.3.1...

Simple Online Bidding System Code Issue Vulnerability

Simple Online Bidding System is an online bidding system by oretnom23 individual developers. A code issue vulnerability exists in SourceCodester Simple Online Bidding System version 1.0, which stems from the parameter img in the file /admin/ajax.php?action=savesettings that can lead to unrestrict...

CVE-2024-35767

Unrestricted Upload of File with Dangerous Type vulnerability in Bogdan Bendziukov Squeeze allows Code Injection.This issue affects Squeeze: from n/a through 1.4...

(Pwn2Own) Phoenix Contact CHARX SEC-3100 CharxUpdateAgent Unrestricted File Upload Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to create arbitrary files on affected installations of Phoenix Contact CHARX SEC-3100 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CharxUpdateAgent service, which listens on TCP port...