3409 matches found
Beijing Baichuo Smart S210 Management Platform Code Issue Vulnerability
Beijing Baichuo Smart S210 Management Platform is a multi-service security gateway intelligent management platform from Beijing Baichuo, China. A code issue exists in Beijing Baichuo Smart S210 Management Platform version 20240117 and prior versions, where an incorrect operation of the parameter...
CVE-2024-22152
Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Product Import Export for WooCommerce.This issue affects Product Import Export for WooCommerce: from n/a through 2.3.7...
PT-2024-14485 · Ukrsolution · Ukrsolution Barcode Scanner/Inventory Manager
Name of the Vulnerable Software and Affected Versions: UkrSolution Barcode Scanner and Inventory manager versions 1.5.1 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the UkrSolution Barcode Scanner and Inventory manager...
CVE-2023-52324
An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary files on affected installations. Please note: although authentication is required to exploit this vulnerability, this vulnerability could be exploited when the attacker has any...
Online Admission System Code Issue Vulnerability
Online Admission System is an online admission system developed by RASHMI KUMARI, an individual developer. A code issue exists in Project Worlds Online Admission System version 1.0, which stems from an unrestricted file upload due to some unknown processing in Documents.php...
Trend Micro Apex Central Unrestricted File Upload Vulnerability
This vulnerability allows remote attackers to create arbitrary files on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of uploaded ZIP files. The issue results from the lack of proper...
CVE-2023-50729
Traccar is an open source GPS tracking system. Prior to 5.11, Traccar is affected by an unrestricted file upload vulnerability in File feature allows attackers to execute arbitrary code on the server. This vulnerability is more prevalent because Traccar is recommended to run web servers as root...
Unrestricted file upload
Traccar is an open source GPS tracking system. Prior to 5.11, Traccar is affected by an unrestricted file upload vulnerability in File feature allows attackers to execute arbitrary code on the server. This vulnerability is more prevalent because Traccar is recommended to run web servers as root...
CVE-2023-50729 An unrestricted file upload vulnerability in traccar leads to RCE
Traccar is an open source GPS tracking system. Prior to 5.11, Traccar is affected by an unrestricted file upload vulnerability in File feature allows attackers to execute arbitrary code on the server. This vulnerability is more prevalent because Traccar is recommended to run web servers as root...
CVE-2023-50729 An unrestricted file upload vulnerability in traccar leads to RCE
Traccar is an open source GPS tracking system. Prior to 5.11, Traccar is affected by an unrestricted file upload vulnerability in File feature allows attackers to execute arbitrary code on the server. This vulnerability is more prevalent because Traccar is recommended to run web servers as root...
PT-2024-13959 · Traccar · Traccar
Name of the Vulnerable Software and Affected Versions: Traccar versions prior to 5.11 Description: Traccar, an open source GPS tracking system, is affected by an unrestricted file upload vulnerability in the File feature. This allows attackers to execute arbitrary code on the server. The issue is...
CVE-2023-49715
A unrestricted php file upload vulnerability exists in the import.json.php temporary copy functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary code execution when chained with an LFI vulnerability. An attacker can send a series of HTTP...
Unrestricted file upload
A unrestricted php file upload vulnerability exists in the import.json.php temporary copy functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary code execution when chained with an LFI vulnerability. An attacker can send a series of HTTP...
CVE-2023-49715
CVE-2023-49715 is an unrestricted PHP file upload vulnerability in WWBN AVideo’s import.json.php temporary copy function (commit 15fed957fb). The vulnerability allows an attacker to upload a PHP payload via the upload pathway and, in combination with a Local File Inclusion, could lead to arbitrar...
CVE-2023-49715
A unrestricted php file upload vulnerability exists in the import.json.php temporary copy functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary code execution when chained with an LFI vulnerability. An attacker can send a series of HTTP...
WWBN AVideo Code Issue Vulnerability
WWBN AVideo is a video platform builder written in PHP by the WWBN team. WWBN AVideo suffers from a code issue that stems from an unrestricted php file upload vulnerability in the temporary copy method of the import.json.php page...
WWBN AVideo import.json.php temporary copy unrestricted php file upload vulnerability
Talos Vulnerability Report TALOS-2023-1885 WWBN AVideo import.json.php temporary copy unrestricted php file upload vulnerability January 10, 2024 CVE Number CVE-2023-49715 SUMMARY A unrestricted php file upload vulnerability exists in the import.json.php temporary copy functionality of WWBN AVide...
CVE-2023-47890
pyLoad 0.5.0 is vulnerable to Unrestricted File Upload...