OTCMS 代码问题漏洞

OTCMS Nettie CMS is an article-based web content management system CMS. A security vulnerability exists in OTCMS version 6.0.1, which originates from an unknown function in the file sysCheckFile.php?mudi=sql, resulting in unrestricted uploads...

IBOS 代码问题漏洞

IBOS is a collaborative office management system. A code issue vulnerability exists in IBOS version 4.5.5. An attacker exploited the vulnerability to cause unrestricted uploads...

Simple and Beautiful Shopping Cart System 代码问题漏洞

Simple and Beautiful Shopping Cart System is an e-commerce platform. A code issue vulnerability exists in SourceCodester Simple and Beautiful Shopping Cart System version 1.0. An attacker could exploit the vulnerability to cause unrestricted uploads...

Young Entrepreneur E-Negosyo System 代码问题漏洞

Young Entrepreneur E-Negosyo System is a Young Entrepreneur E-Negosyo System for janobe individual developers. A security vulnerability exists in version 1.0 of the SourceCodester Young Entrepreneur E-Negosyo System that stems from an incorrect manipulation of the parameter image resulting in...

PT-2023-2469 · Nextcloud +2 · Nextcloud Server +2

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 24.0.10 Nextcloud Server versions prior to 25.0.4 Description: The issue is related to the lack of restrictions on file uploads in the Nextcloud server, allowing administrators to upload a logo or favicon wi...

HadSky 代码问题漏洞

HadSky is an original open source php light forum system from China's HadSky company. A security vulnerability exists in HadSky version 7.7.16, which stems from the presence of unrestricted uploads...

CVE-2023-1559

A vulnerability classified as problematic was found in SourceCodester Storage Unit Rental Management System 1.0. This vulnerability affects unknown code of the file classes/Users.php?f=save. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

Simple Online Hotel Reservation System 代码问题漏洞

Simple Online Hotel Reservation System is an online hotel reservation system. A code issue vulnerability exists in Simple Online Hotel Reservation System version 1.0, which stems from a problem with the file addroom.php that can lead to unrestricted uploads...

Simple and Beautiful Shopping Cart System 代码问题漏洞

Simple and Beautiful Shopping Cart System is an e-commerce platform. A code issue exists in version 1.0 of the Simple and Beautiful Shopping Cart System, which stems from a security issue with an unknown function in the file uploadera.php that results in unrestricted uploads...

Simple and Nice Shopping Cart Script 代码问题漏洞

Simple and Nice Shopping Cart Script is simple and nice PHP shopping cart script. A vulnerability exists in SourceCodester Simple and Nice Shopping Cart Script version 1.0, which stems from a problem with the file uploaderm.php, where the operation of the parameter submit results in unrestricted...

RockOA 代码问题漏洞

RockOA Xinhuo is an open source office OA system . RockOA 2.3.2 version of the code problem vulnerability , the vulnerability stems from the file acloudCosAction.php.SQL function runAction has problems with the operation of the parameter fileid will lead to unrestricted uploads...

Simple Music Player 代码问题漏洞

Simple Music Player is a simple music player by the individual developer Carlo Montero. A code issue vulnerability exists in SourceCodester Simple Music Player version 1.0, which stems from a problem with the file savemusic.php, where manipulation of the parameter filename can lead to unrestricte...

xzjie cms 代码问题漏洞

xzjie cms is xzjie individual developers of the cloud tower guest - cabin content publishing system. A code issue vulnerability exists in xzjie cms 1.0.3 and earlier versions, which stems from a problem with files/api/upload, where manipulation of the parameter uploadFile can lead to unrestricted...

Simple Art Gallery 代码问题漏洞

Simple Art Gallery is an art gallery application from Simple Art Gallery, Inc. A code issue vulnerability exists in Simple Art Gallery version 1.0 that stems from a problem with the function sliderPicSubmit in the file adminHome.php, which can lead to unrestricted uploads...

Online Pizza Ordering System 代码问题漏洞

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero Personal Developer. A code issue vulnerability exists in SourceCodester Online Pizza Ordering System version 1.0, which stems from a security issue in the function savemenu that results in unrestricted uploads...

Online Tours & Travels Management System 代码问题漏洞

Online Tours & Travels Management System is an online tours management system by Mayuri K. Individual developer. A code issue exists in SourceCodester Online Tours & Travels Management System version 1.0, which is caused by an unknown function in the file admin/ab.php, which causes unrestricted...

GHSA-6X8F-X6QW-QWX3 cockpit-hq/cockpit is vulnerable to unrestricted file uploads

Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1...

UCMS 代码问题漏洞

UCMS is a content management system written in PHP. A code issue vulnerability exists in UCMS version 1.6, which stems from an unknown security issue in the file sadmin/fileedit.php in the component System File Management Module, which could lead to unrestricted uploads via the parameter id...

Best pos management system 代码问题漏洞

Best pos management system is a best pos management system by Mayuri K. Individual developer. A code issue exists in version 1.0 of Best POS Management System, which is caused by some unknown processing in the file index.php?page=sitesettings of the component image handler, resulting in...

CVE-2023-0651

A vulnerability was found in FastCMS 0.1.0. It has been classified as critical. Affected is an unknown function of the component Template Management. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may b...