3405 matches found
Emaar Real Estate Agency Directory System 5.7 Shell Upload
==================================================================================================================================== | Title : Emaar – Real Estate Agency Directory System v5.7 Unrestricted File Upload Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro /...
Unrestricted file upload
File Upload vulnerability in Wolf-leo EasyAdmin8 v.1.0 allows a remote attacker to execute arbtirary code via the upload type function...
doorGets CMS 7.0 Shell Upload
==================================================================================================================================== | Title : doorGets CMS v7.0 Unrestricted File Upload Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...
CVE-2023-32564
Ivanti Avalanche FileStoreConfig Arbitrary File Upload Remote Code Execution vulnerability (CVE-2023-32564) affects Avalanche
PT-2023-23874 · Avalanche · Avalanche
Name of the Vulnerable Software and Affected Versions: Avalanche versions 6.3.x and below Description: An unrestricted upload of file with a dangerous type could allow an attacker to achieve remote code execution. The issue is fixed in version 6.4.1. Recommendations: For Avalanche versions 6.3.x...
Dexx CMS HTML And Site Builder 2.2.3 XSS / Arbitrary File Upload
==================================================================================================================================== | Title : Dexx CMS - HTML and Site Builder V2.2.3 Remote File Upload vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser :...
CVE-2023-4186
A vulnerability was found in SourceCodester Pharmacy Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file managewebsite.php. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit h...
CVE-2023-4159
CVE-2023-4159 affects Omeka-S before 4.0.3. The issue is an unrestricted file upload vulnerability where a malicious file can bypass whitelist checks by using Magic Bytes (GIF87a) to upload dangerous code (e.g., shell_php.hphp), enabling remote code execution when commands are run via the uploade...
CVE-2023-33493
An Unrestricted Upload of File with Dangerous Type vulnerability in the Ajaxmanager File and Database explorer ajaxmanager module for PrestaShop through 2.3.0, allows remote attackers to upload dangerous files without restrictions...
CVE-2023-32225
Sysaid - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method...
Availability Booking Calendar v1.0 - Multiple Cross-site scripting Vulnerability
Exploit Title: Availability Booking Calendar v1.0 - Multiple Cross-site scripting XSS Exploit Author: Andrey Stoykov Tested on: Ubuntu 20.04 Blog: http://msecureltd.blogspot.com XSS 1: Steps to Reproduce: 1. Browse to Bookings 2. Select All Bookings 3. Edit booking and select Promo Code 4. Enter...
CMS Ultimate Solutions DreamSus 1.4 Shell Upload
==================================================================================================================================== | Title : CMS Ultimate Solutions DreamSus v1.4 unrestricted file upload Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser :...
PT-2023-4092 · Gbrowse · Gbrowse
Name of the Vulnerable Software and Affected Versions: GBrowse affected versions not specified Description: The issue allows for the upload of files with any format, which are then placed in an area accessible through unauthenticated web requests. This enables anyone who can upload files through...
CVE-2023-37289
It is identified a vulnerability of Unrestricted Upload of File with Dangerous Type in the file uploading function in InfoDoc Document On-line Submission and Approval System, which allows an unauthenticated remote attacker can exploit this vulnerability without logging system to upload and run...
CVE-2023-37289 InfoDoc Document On-line Submission and Approval System - Arbitrary File Upload
It is identified a vulnerability of Unrestricted Upload of File with Dangerous Type in the file uploading function in InfoDoc Document On-line Submission and Approval System, which allows an unauthenticated remote attacker can exploit this vulnerability without logging system to upload and run...
CVE-2023-37289 InfoDoc Document On-line Submission and Approval System - Arbitrary File Upload
It is identified a vulnerability of Unrestricted Upload of File with Dangerous Type in the file uploading function in InfoDoc Document On-line Submission and Approval System, which allows an unauthenticated remote attacker can exploit this vulnerability without logging system to upload and run...
Mountain Torrent Disaster Prevention and Control of Monitoring and Early Warning System 代码问题漏洞
Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System is a Mountain Flood Disaster Prevention Monitoring and Early Warning System from Suncreate. A code issue vulnerability exists in Mountain Torrent Disaster Prevention and Control of Monitoring and Early Warning System...
Chengdu Flash Flood Disaster Monitoring and Warning System 代码问题漏洞
Chengdu Flash Flood Disaster Monitoring and Warning System is a flash flood disaster monitoring and warning system in Chengdu. A code issue exists in Chengdu Flash Flood Disaster Monitoring and Warning System version 2.0, the vulnerability stems from an unknown function in the file...
CVE-2023-35189 Iagona ScrutisWeb Unrestricted Upload of File with Dangerous Type
Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a remote code execution vulnerability that could allow an unauthenticated user to upload a malicious payload and execute it...