345 matches found
FastCMS 代码问题漏洞
FastCMS is a content management system from FastCMS, Inc. A code issue vulnerability exists in FastCMS version 0.1.0, which stems from unknown handling of the component Template Management, resulting in unrestricted uploads...
memos 跨站脚本漏洞
memos is an open source hosted memos center with knowledge management and social features. Versions of memos prior to 0.10.0 suffer from a cross-site scripting vulnerability that stems from the fact that its resource upload feature does not restrict the type of file that can be uploaded leading t...
Microweber vulnerable to unrestricted malicious uploads
Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2...
PT-2022-28046 · Unknown · Microweber
Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.3.2 Description: The issue concerns an unrestricted upload of files with dangerous types. There is no information provided about the estimated number of potentially affected devices worldwide or detai...
FeMiner wms 代码问题漏洞
FeMiner wms is a repository management system for individual developers of the Chinese front-end miner FeMiner. A security vulnerability exists in FeMiner wms, which stems from some unknown functionality in the file /product/savenewproduct.php?flag=1, where the operation of the parameter upfile...
House Rental System 代码问题漏洞
House Rental System is a rental management system that allows you to add, modify and delete listings and to place reservations. A security vulnerability exists in House Rental System due to unknown functionality in the component POST request handler file tenant-engine.php, where the operation of...
Human Resource Management System 代码问题漏洞
Human Resource Management System is a human resource management system by maverickosama Personal Developer. A security vulnerability exists in Human Resource Management System version 1.0 due to some unknown handling of the file /hrm/controller/employee.php in the component Content-Type Handler,...
jerryhanjj ERP 代码问题漏洞
jerryhanjj ERP is Jerry's personal developer of an ERP import, export, storage and marketing system. jerryhanjj ERP has a security vulnerability that originates from an unknown function in the Commodity Management component, which can be exploited by an attacker to cause unrestricted uploads by...
easyii CMS 代码问题漏洞
easyii CMS is a simple CMS for simple websites. easyii CMS has a security vulnerability that stems from a compromised function file in the helpers/Upload.php file of the component File Upload Management, which could lead to unrestricted uploads. No details of the vulnerability are currently...
Yunjing CMS 安全漏洞
Yunjing CMS is an open source PHP enterprise website construction management system from China Yunjing Yunjing Company. A security vulnerability exists in Yunjing CMS, which originates from an affected unknown code in the file /index/user/uploadimg.html, where manipulation of the parameter file...
Simple Cold Storage Management System 代码问题漏洞
Simple Cold Storage Management System is a Simple Cold Storage Management System by Carlo Montero Personal Developer. A security vulnerability exists in Simple Cold Storage Management System version 1.0, which stems from the lack of restriction on user uploads...
BoxBilling 代码问题漏洞
BoxBilling is open source billing and customer management software from the individual developers of BoxBilling. A security vulnerability exists in BoxBilling versions prior to 0.0.1 that stems from not restricting the upload of dangerous types of files...
Gas Agency Management System 代码问题漏洞
Gas Agency Management System is a gas agency management software by Mayuri K. Personal Developer. It is used to manage the day-to-day operations of a gas agency. A code issue vulnerability exists in Gas Agency Management System. An attacker can exploit this vulnerability to manipulate shell...
Gym Management System 代码问题漏洞
Gym Management System is a gym management system. The system is developed in C and sql server and features customer and vendor management, product management, sales management, gym membership management, fitness assessment, system logging, database backup and restore. A code issue vulnerability...
Company Website CMS 代码问题漏洞
Company Website CMS is a company website/CMS by Torrahclef Personal Developer. A security vulnerability exists in Company Website CMS, which stems from an unknown function of the file /dashboard/add-service.php of the component Add Service Handler being affected, resulting in unrestricted uploads...
Company Website CMS 代码问题漏洞
Company Website CMS is a company website/CMS by Torrahclef Personal Developer. Company Website CMS suffers from a code issue vulnerability that stems from some unknown functionality of /dashboard/add-portfolio.php being affected, where manipulation of the parameter ufile can lead to unrestricted...
Alphaware Simple E-Commerce System 代码问题漏洞
Alphaware Simple E-Commerce System is an e-commerce system by razormist individual developers. The Alphaware Simple E-Commerce System suffers from a code issue that arises from an unknown portion of the adminfeature.php code in its backend administration interface that allows an attacker to perfo...
jeecg 代码问题漏洞
jeecg is a software application. An intelligent development platform based on a code generator. A security vulnerability exists in jeecg-boot, which stems from unknown code affecting file/api/, which operates on parameter files resulting in unrestricted uploads. Attacks can be initiated remotely...
Chris Brame Trudesk 代码问题漏洞
Chris Brame Trudesk is an open source helpdesk/ticketing solution from Chris Brame USA. A code issue vulnerability exists in versions prior to Chris Brame Trudesk 1.2.4, which stems from unrestricted uploads of files of a dangerous type...
