CVE-2023-23707

CVE-2023-23707 affects Awsm Innovations Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files plugin (<= 2.7.1). Root cause: improper input neutralization enabling stored XSS via uploaded SVG and HTML files. Public details from Patchstack confirm the vulnerable versions and that a f...

CVE-2023-1415 Simple Art Gallery adminHome.php sliderPicSubmit unrestricted upload

A vulnerability was found in Simple Art Gallery 1.0. It has been declared as critical. This vulnerability affects the function sliderPicSubmit of the file adminHome.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-223126 is the identifier assigned to...

Unrestricted file upload

An issue was discovered in Sitecore XP/XM 10.3. As an authenticated Sitecore user, a unrestricted language file upload vulnerability exists the can lead to direct code execution on the content management CM server...

Sitecore 代码问题漏洞

Sitecore is an online marketing content management system CMS from Sitecore, Denmark. The system supports content editing, multiple languages, multi-site deployment, digital asset management and more. A security vulnerability exists in Sitecore XP/XM version 10.3, which stems from the presence of...

CVE-2023-26262

CVE-2023-26262 affects Sitecore XP/XM 10.3. An authenticated Sitecore user can upload language files without restrictions, enabling direct code execution on the content management (CM) server. The vulnerability stems from an unrestricted language file upload mechanism in the CMS. Impact is descri...

PT-2023-16949 · Unknown · Sourcecodester Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Tours & Travels Management System version 1.0 Description: A vulnerability was found in the SourceCodester Online Tours & Travels Management System, allowing for unrestricted upload due to the manipulation of the img...

CVE-2023-1313

CVE-2023-1313 affects cockpit-hq/cockpit prior to 2.4.1. The root cause is a lack of extension checking during file uploads, allowing unrestricted uploads of files with dangerous types. This can enable remote code execution on vulnerable servers as described in multiple connected sources. The iss...

CVE-2023-1313 Unrestricted Upload of File with Dangerous Type in cockpit-hq/cockpit

Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1...

CVE-2023-1303

A vulnerability was found in UCMS 1.6 and classified as critical. This issue affects some unknown processing of the file sadmin/fileedit.php of the component System File Management Module. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. Th...

PT-2023-2087 · Ecshop · Ecshop

Name of the Vulnerable Software and Affected Versions: ECshop versions up to 4.1.8 Description: A vulnerability was found in the New Product Handler component of ECshop, allowing for unrestricted file upload. This can be exploited remotely, potentially allowing an attacker to upload arbitrary...

Unrestricted file upload

CleverStupidDog yf-exam 1.8.0 is vulnerable to File Upload. There is no restriction on the suffix of the uploaded file, resulting in any file upload...

CVE-2023-25402

CleverStupidDog yf-exam 1.8.0 is vulnerable to File Upload. There is no restriction on the suffix of the uploaded file, resulting in any file upload...

Unrestricted file upload

Cloudflow contains a unauthenticated file upload vulnerability, which makes it possible for an attacker to upload malicious files to the CLOUDFLOW PROOFSCOPE built-in storage...

Unrestricted File Upload

pimcore/pimcore is vulnerable to Unrestricted File Upload. The vulnerability exists in the uploadImageAction function in UserController.php because the file type of the avatar is not properly checked when uploading which allows an attacker to upload arbitrary files into the system, and execute...

SUSE CVE-2013-4444

Unrestricted file upload vulnerability in Apache Tomcat 7.x before 7.0.40, in certain situations involving outdated java.io.File code and a custom JMX configuration, allows remote attackers to execute arbitrary code by uploading and accessing a JSP file...

SAP BusinessObjects Business Intelligence Platform Unrestricted File Upload (3256787)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is prior to 4.2 SP9 P12, 4.3 SP2 P9, 4.3 SP3 P1 or 4.3 SP4. It may, therefore, be affected by an unrestricted file upload vulnerability in the Central Management Console CMC. A remote attacker,...

ECShop 代码问题漏洞

ShopeX ECShop is an open source mall system of the Chinese business school ShopeX company . Support PC + H5 + APP + small program mall, source code free download experience, suitable for enterprise development and build mall. EcShop 4.1.5 version of the code problematic vulnerability , the...

Arbitrary File Write

net.mingsoft:ms-mcms is vulnerable to Arbitrary File Write. An authenticated attacker is able to cause an arbitrary file write via the ms/template/writeFileContent.do component due to unrestricted file upload...

PT-2023-3790 · NetGear · Netgear Prosafe Network Management System

Name of the Vulnerable Software and Affected Versions: NETGEAR ProSAFE Network Management System affected versions not specified Description: The issue is related to an unrestricted file upload vulnerability in the UpLoadServlet class, which can be exploited by remote attackers to execute arbitra...

CVE-2022-42971

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could cause remote code execution when the attacker uploads a malicious JSP file. Affected Products: APC Easy UPS Online Monitoring Software Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to...