27 matches found
PT-2023-12173 · Kitecms · Kitecms
Name of the Vulnerable Software and Affected Versions: KiteCMS version 1.1 Description: A File Upload issue allows a remote attacker to execute arbitrary code via the uploadFile function. This enables the attacker to potentially gain control over the system. Recommendations: For KiteCMS version...
CVE-2022-44942
Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function...
Arbitrary file deletion
Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function...
PT-2022-27342 · Casdoor · Casdoor
Name of the Vulnerable Software and Affected Versions: Casdoor versions prior to 1.126.1 Description: The issue is related to an arbitrary file deletion vulnerability. This vulnerability can be exploited via the uploadFile function. Recommendations: For versions prior to 1.126.1, update to versio...
CVE-2022-44942: Improper Limitation of a Pathname to a Restricted Directory
Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function...
CVE-2022-44942
Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google, a U.S. company. Google Android is vulnerable to an information disclosure vulnerability caused by the presence of an obfuscated agent in the uploadFile function in FileUploadServiceImpl.java that leads to incorrect file...