Bumsys Business Management System 1.0.3-beta Shell Upload

Exploit Title: - unilogies/bumsys v1.0.3-beta - Unrestricted File Upload Google Dork : NA Date: 19-01-2023 Exploit Author: AFFAN AHMED Vendor Homepage: https://github.com/unilogies/bumsys Software Link: https://github.com/unilogies/bumsys/archive/refs/tags/v1.0.3-beta.zip Version: 1.0.3-beta Test...

PT-2023-8010 · Ivanti · Ivanti Avalanche Enterpriseserver Service

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche EnterpriseServer Service affected versions not specified Description: The issue is related to an unrestricted file upload vulnerability in the Ivanti Avalanche EnterpriseServer Service, which can be exploited to elevate...

CVE-2023-2924

Summary: CVE-2023-2924 affects Supcon SimField up to version 1.80.00.00. The issue is in the endpoint /admin/reportupload.aspx where manipulating the parameter files[] enables unrestricted uploads, allowing a remote attacker to potentially upload arbitrary files. Multiple sources (NVD, Red Hat, C...

CVE-2023-27397

Vulnerability summary (CVE-2023-27397) : MicroEngine Mailform (versions 1.1.0–1.1.8) suffers an unrestricted upload of a dangerous file type when the product’s file upload and server save options are enabled. This allows a remote attacker to save an arbitrary file on the server and execute it, le...

PT-2023-21096 · Microengine · Microengine Mailform

Name of the Vulnerable Software and Affected Versions: MicroEngine Mailform versions 1.1.0 through 1.1.8 PostgreSQL affected versions not specified Description: The issue allows for the unrestricted upload of files with dangerous types. If the file upload function and server save option are...

CVE-2023-2712

Unrestricted Upload of File with Dangerous Type vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Command Injection, Using Malicious Files, Upload a Web Shell to a Web Server. This issue affects Rental Module: before 23.05.15...

Design/Logic Flaw

Unrestricted Upload of File with Dangerous Type vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Command Injection, Using Malicious Files, Upload a Web Shell to a Web Server.This issue affects Rental Module: before 23.05.15...

CVE-2023-2712

The CVE-2023-2712 issue affects Ideasoft’s E-commerce Platform Rental Module (pre-23.05.15). It is caused by Unrestricted Upload of File with Dangerous Type, enabling Command Injection via uploaded files and potentially a Web Shell on the web server. Documented impact includes high confidentialit...

PT-2023-20965

Name of the Vulnerable Software and Affected Versions Rental Module versions prior to 23.05.15 Description The issue allows Command Injection and enables attackers to upload malicious files, including web shells, to a web server. This is due to an Unrestricted Upload of File with Dangerous Type...

CVE-2023-31903

GuppY CMS 6.00.10 is vulnerable to Unrestricted File Upload which allows remote attackers to execute arbitrary code by uploading a php file...

CVE-2023-31903

GuppY CMS 6.00.10 is vulnerable to Unrestricted File Upload which allows remote attackers to execute arbitrary code by uploading a php file...

Unrestricted file upload

Algoo Tracim before 4.4.2 allows XSS via HTML file upload...

GuppY 代码问题漏洞

GuppY is a CMS system from France with many modules such as forums, news, messages, downloads and more. A security vulnerability exists in GuppY CMS version 6.00.10, which stems from an unrestricted file upload vulnerability that allows remote attackers to execute arbitrary code by uploading php...

Schneider Electric APC Easy UPS Online UpLoadAction Unrestricted File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric APC Easy UPS Online. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UpLoadAction class. When parsing the filename parameter, the...

CVE-2023-31903

GuppY CMS 6.00.10 is vulnerable to Unrestricted File Upload which allows remote attackers to execute arbitrary code by uploading a php file...

CVE-2023-31903

CVE-2023-31903 affects GuppY CMS 6.00.10. The vulnerability is an Unrestricted File Upload that allows remote attackers to upload a PHP file and achieve arbitrary code execution with network access and no privileges required. The CVE’s base impact is high for confidentiality, integrity, and avail...

CVE-2023-31857

Sourcecodester Online Computer and Laptop Store 1.0 allows unrestricted file upload and can lead to remote code execution. The vulnerability path is /classes/Users.php?f=save...

CVE-2023-31857

Sourcecodester Online Computer and Laptop Store 1.0 allows unrestricted file upload and can lead to remote code execution. The vulnerability path is /classes/Users.php?f=save...

CVE-2023-31857

Sourcecodester Online Computer and Laptop Store 1.0 allows unrestricted file upload and can lead to remote code execution. The vulnerability path is /classes/Users.php?f=save...

CVE-2023-31857

CVE-2023-31857 affects Sourcecodester Online Computer and Laptop Store 1.0. The vulnerability is an unrestricted file upload via the endpoint /classes/Users.php?f=save, enabling remote code execution. References and metadata consistently describe this path and the high impact (CVSS 3.1: 9.8, NET/...