3400 matches found
CVE-2021-37929
CVE-2021-37929 affects Zoho ManageEngine ADManager Plus v7110 and earlier, where an unrestricted file upload vulnerability enables remote code execution. The issue stems from improper file upload restrictions in the application, allowing an attacker to push and execute arbitrary code on the serve...
CVE-2021-37929
Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution...
CVE-2021-37928
Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution...
CVE-2021-37928
ADManager Plus 7110 and earlier versions are affected by an unrestricted file upload vulnerability that can lead to remote code execution. The issue (described across multiple sources as a file-upload flaw) enables an attacker to upload arbitrary files and execute code on the server. Affected pro...
CVE-2021-37926
Summary (CVE-2021-37926): Zoho ManageEngine ADManager Plus (versions up to and including 7110) is vulnerable to an unrestricted file upload that can lead to remote code execution. The CNVD/NVD entries corroborate file-upload–driven RCE against ADManager Plus 7110 and earlier. The NVD CVSS metrics...
CVE-2021-37926
Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution...
in yeswiki/yeswiki
Description Uploaded files represent a significant risk to applications. The first step in many attacks is to get some code to the system to be attacked. Then the attack only needs to find a way to get the code executed. Using a file upload helps the attacker to inject javascript code via SVG...
CVE-2021-37761
Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to unrestricted file upload, leading to remote code execution...
CVE-2021-37761
Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to unrestricted file upload, leading to remote code execution...
CVE-2021-37761
Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to unrestricted file upload, leading to remote code execution...
Unrestricted file upload
Zoho ManageEngine ADManager Plus before 7111 is vulnerable to unrestricted file which leads to Remote code execution...
CVE-2021-40845
The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called AlphaWeb XE, does not restrict file upload in the Custom Scripts section at php/index.php. Neither the content nor extension of the uploaded files is checked, allowing execution of PHP code under the /cmd directory...
CVE-2021-36440
Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the 'fileurl' parameter in the component AdminUpdateController.class.php'...
Unrestricted file upload
Unrestricted Upload of File with Dangerous Type in DotCMS v5.2.3 and earlier allow remote attackers to execute arbitrary code via the component "/src/main/java/com/dotmarketing/filters/CMSFilter.java"...
CVE-2021-36440
Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the 'fileurl' parameter in the component AdminUpdateController.class.php'...
CVE-2021-36440
CVE-2021-36440 affects ShowDoc v2.9.5 and is an Unrestricted File Upload vulnerability. The reports consistently state that an attacker can upload a file through the file_url parameter in AdminUpdateController.class.php to execute arbitrary code remotely. Multiple sources (NVD, Red Hat advisory, ...
CVE-2020-19138
Unrestricted Upload of File with Dangerous Type in DotCMS v5.2.3 and earlier allow remote attackers to execute arbitrary code via the component "/src/main/java/com/dotmarketing/filters/CMSFilter.java"...
CVE-2021-32955
Delta Electronics DIAEnergie Version 1.7.5 and prior allows unrestricted file uploads, which may allow an attacker to remotely execute code...
CVE-2021-32955
Delta Electronics DIAEnergie vulnerable in versions up to 1.7.5 (and prior) to unrestricted file uploads, enabling remote code execution. This is the CVE-2021-32955 issue; ICS advisory Update C fixes recommend upgrading to 1.9 or later and applying network isolation measures. The documented impac...