CVE-2025-4006: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical has been found in youyiio BeyongCms 1.6.0. Affected is an unknown function of the file /admin/theme/Upload.html of the component Document Management Page. The manipulation of the argument File leads to unrestricted upload. It is possible to launch the attack...

BeyongCms 代码问题漏洞

BeyongCms is a lightweight content management system by youyiio individual developer. A code issue vulnerability exists in BeyongCms version 1.6.0, which stems from the incorrect operation of the parameter File in the file /admin/theme/Upload.html leading to unlimited uploads...

PT-2018-12795

Name of the Vulnerable Software and Affected Versions ukcms versions 1.1.7 and earlier Description A file upload issue exists due to insufficient filtering of the file upload type. An attacker can exploit this by uploading a script Trojan to the admin.php/admin/configset/index/group/upload.html...

Joomla - IDoEditor Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

mktba Remote File Upload Vulnerability

Exploit for php platform in category web applications =========================================================================== Exploit Title: mktba == mktba Remote File Upload Vulnerability Author: Caddy-Dz Facebook Page: www.facebook.com/islam.caddy Category:: webapps E-mail: email protected...

MRW PHP shell upload vulnerability

Exploit for unknown platform in category web applications ================================== MRW PHP shell upload vulnerability ================================== Exploit Title: MRW PHP Upload Remote file upload Vulnerability Date: 12/02/2010 Author: Phenom Software Link:...

CVE-2007-5738: Improper Input Validation

The FlashUpload component in Korean GHBoard uses a client-side protection mechanism to prevent uploading of dangerous file extensions, which allows remote attackers to bypass restrictions and upload arbitrary files via a modified copy of component/flashupload/upload.html...