CVE-2014-2025

Unrestricted file upload vulnerability in an unspecified third party tool in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it v...

Unrestricted file upload

Unrestricted file upload vulnerability in an unspecified third party tool in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it v...

CVE-2014-2025

CVE-2014-2025 concerns an Unrestricted File Upload vulnerability in United Planet Intrexx Professional, affecting 5.2 (before Online Update 0905) and 6.x (before Online Update 10). The flaw allows remote code execution by uploading a file with an executable extension and then accessing it via unk...

CVE-2013-7390

Unrestricted file upload vulnerability in AgentLogUploadServlet in ManageEngine DesktopCentral 7.x and 8.0.0 before build 80293 allows remote attackers to execute arbitrary code by uploading a file with a jsp extension, then accessing it via a direct request to the file in the webroot...

CVE-2013-7390

CVE-2013-7390 describes an unrestricted file upload in ManageEngine Desktop Central’s AgentLogUploadServlet. A remote attacker can upload a JSP file to the webroot and access it directly to execute arbitrary code, affecting Desktop Central 7.x and 8.0.0 prior to build 80293. Multiple sources corr...

Stripo Inc: SSRF & unrestricted file upload on https://my.stripo.email/

The researcher discovered an SSRF & unrestricted file upload Remote code execution vulnerabilities...

Unrestricted file upload

Unrestricted file upload vulnerability in includes/classes/uploadify-v2.1.4/uploadify.php in HelpDEZk 1.0.1 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specified...

CVE-2014-8516

CVE-2014-8516 concerns Visual Mining NetCharts Server. The connected sources describe an unrestricted file upload vulnerability in the NetCharts Server web interface that allows remote attackers to execute arbitrary code by uploading a file with an executable extension and then accessing it via u...

CVE-2014-8337

CVE-2014-8337 affects HelpDEZk 1.0.1 and earlier due to an unrestricted upload of files with dangerous extensions in /includes/classes/uploadify-v2.1.4/uploadify.php . The vulnerability arises from lack of validation of file extensions, enabling a remote attacker to upload arbitrary files and the...

CVE-2019-17403

Nokia IMPACT 18A: An unrestricted File Upload vulnerability was found that may lead to Remote Code Execution...

CVE-2019-17403

CVE-2019-17403 : Nokia IMPACT versions prior to 18A contain an unrestricted file upload vulnerability that could enable remote code execution. The cited descriptions consistently state this vulnerability for Nokia IMPACT, with no explicit exploit details or affected subcomponents beyond the gener...

Exploit for Unrestricted Upload of File with Dangerous Type in Apache Solr

CVE-2019-12409 Apache Solr RCE...

CVE-2019-12271

Sandline Centraleyezer On Premises allows unrestricted File Upload with a dangerous type, because the feature of adding ".jpg" to any uploaded filename is not enforced on the server side...

CVE-2019-12311

Sandline Centraleyezer On Premises allows Unrestricted File Upload leading to Stored XSS. An HTML page running a script could be uploaded to the server. When a victim tries to download a CISO Report template, the script is loaded...

Unrestricted file upload

Sandline Centraleyezer On Premises allows Unrestricted File Upload leading to Stored XSS. An HTML page running a script could be uploaded to the server. When a victim tries to download a CISO Report template, the script is loaded...

CVE-2019-12311

CVE-2019-12311 affects Sandline Centraleyezer (On Premises). The issue is an unrestricted file upload vulnerability in Centraleyezer that allows uploading an HTML page containing a script, which can be loaded when a victim downloads a CISO Report template, leading to stored XSS. Multiple connecte...

Zoho ManageEngine OpManager Image Arbitrary File Upload (CVE-2018-18475)

An arbitrary file upload vulnerability exists in Zoho ManageEngine OpManager. The vulnerability is due to insufficient validation of uploaded images. Successful exploitation could result in unrestricted file upload and possible further attacks...

CVE-2019-8140

An unrestricted file upload vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin user can manipulate the Synchronization feature in the Media File Storage of the database to transform uploaded JPEG file into a PHP file...

Unrestricted file upload

An unrestricted file upload vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin user can manipulate the Synchronization feature in the Media File Storage of the database to transform uploaded JPEG file into a PHP file...

CVE-2019-8140

CVE-2019-8140 affects Magento 2.x: versions prior to 2.2.10 (and 2.3 prior to 2.3.3 or 2.3.2-p1) are vulnerable. An authenticated admin can exploit the Media File Storage Synchronization to convert uploaded JPEGs into PHP files, enabling unrestricted file upload. Root cause: improper handling in ...