CVE-2024-25802

SKINsoft S-Museum 7.02.3 allows Unrestricted File Upload via the Add Media function. Unlike in CVE-2024-25801, the attack payload is the file content...

CVE-2024-25802

Affected software: SKINsoft S-Museum 7.02.3. Vulnerability: Unrestricted file upload via the Add Media function. The attack payload, in this case, is the file content (not the filename). Root cause / nature: Arbitrary file upload capability exists in the Add Media workflow. Impact (as stated): Hi...

CVE-2024-25802

SKINsoft S-Museum 7.02.3 allows Unrestricted File Upload via the Add Media function. Unlike in CVE-2024-25801, the attack payload is the file content...

PT-2024-2171 · Unknown · F-Logic Datacube3

Name of the Vulnerable Software and Affected Versions: F-logic DataCube3 version 1.0 Description: The issue is related to unrestricted file upload, which could allow an authenticated malicious actor to upload a file of a dangerous type by manipulating the filename extension. This could potentiall...

CVE-2024-23762

Unrestricted File Upload vulnerability in Content Manager feature in Gambio 4.9.2.0 allows attackers to execute arbitrary code via upload of crafted PHP file...

Unrestricted File Upload

Apache Solr is vulnerable to Unrestricted File Upload. The vulnerability is due to the ConfigSets API accepting and uploading jar/class files without proper restriction of file type. When backing up Solr Collections, the configSet files will be saved to disk, but if the backup directory is includ...

CVE-2024-23762

Unrestricted File Upload vulnerability in Content Manager feature in Gambio 4.9.2.0 allows attackers to execute arbitrary code via upload of crafted PHP file...

CVE-2024-23762

CVE-2024-23762 affects Gambio 4.9.2.0 Content Manager: Unrestricted File Upload allows uploading a crafted PHP file to execute arbitrary code. CVSSv3.1 base score 7.8 (HIGH); attack vector: LOCAL, attack complexity: LOW, privileges required: LOW, user interaction: NONE, impact on confidentiality,...

Unrestricted file upload

Unrestricted File Upload vulnerability in Employee Management System 1.0 allows a remote attacker to execute arbitrary code via the edit-photo.php component...

PT-2024-20423 · Unknown · Employee Management System

Name of the Vulnerable Software and Affected Versions: Employee Management System version 1.0 Description: The issue allows a remote attacker to execute arbitrary code via the "edit-photo.php" component. This is due to an Unrestricted File Upload vulnerability. Recommendations: For Employee...

CVE-2024-22515

Unrestricted File Upload vulnerability in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to upload arbitrary files via the upload audio component...

PT-2024-17641 · Beijing Baichuo · Smart S40 Management Platform

Name of the Vulnerable Software and Affected Versions: Beijing Baichuo Smart S40 Management Platform versions up to 20240126 Description: A critical issue has been found in the Smart S40 Management Platform, affecting some unknown functionality of the file /useratte/web.php of the component Impor...

CVE-2024-22515

CVE-2024-22515 affects iSpyConnect Agent DVR 5.1.6.0 with an unrestricted file-upload in the audio upload component. Root cause per sources is lack of verification of the uploaded file type, enabling arbitrary file uploads. This vulnerability can lead to high impact on confidentiality, integrity,...

CVE-2024-22515

Unrestricted File Upload vulnerability in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to upload arbitrary files via the upload audio component...

CVE-2023-6675 Malicious File Upload in National Keep's CyberMath

Unrestricted Upload of File with Dangerous Type vulnerability in National Keep Cyber Security Services CyberMath allows Upload a Web Shell to a Web Server. This issue affects CyberMath: from v.1.4 before v.1.5...

National Keep CyberMath Code Issue Vulnerability

National Keep CyberMath is a cybersecurity risk analysis tool for organizations from National Keep. A code issue vulnerability exists in National Keep CyberMath versions v1.4 through v1.5 that stems from the presence of an unrestricted upload of a dangerous type of file that allows a Web Shell to...

openBI Security Vulnerabilities

openBI is a big data visualization solution from openBI Inc. A security vulnerability exists in openBI version 1.0.8, which stems from an unrestricted file upload in the uploadFile method of the /application/index/controller/File.php file...

SourceCodester Facebook News Feed Like Code Issue Vulnerability

Facebook News Feed Like is a Facebook-like application by oretnom23 individual developer. A code issue vulnerability exists in SourceCodester Facebook News Feed Like version 1.0 that stems from the presence of an unrestricted file upload vulnerability...

openBI Code Issues Vulnerabilities

openBI is a big data visualization solution from openBI. A code issue vulnerability exists in openBI version 1.0.8, which stems from an unrestricted file upload in the uploadIcon method of the /application/index/controller/Screen.php file...

CVE-2024-0939 Byzoro Smart S210 Management Platform uploadfile.php unrestricted upload

A vulnerability has been found in Byzoro Smart S210 Management Platform up to 20240117 and classified as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument fileupload leads to unrestricted upload. The attack can be initiated...