245 matches found
CVE-2024-2055
The "Rich Filemanager" feature of Artica Proxy provides a web-based interface for file management capabilities. When the feature is enabled, it does not require authentication by default, and runs as the root user...
kodbox security breach
kodbox is a web file manager. A security vulnerability exists in kodbox version v1.43, which stems from the presence of a cross-site scripting XSS vulnerability...
CVE-2023-7141
A vulnerability was found in code-projects Client Details System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/update-clients.php. The manipulation of the argument uid leads to sql injection. The exploit has been disclosed to the public and may be...
PT-2023-28112 · Unknown · Pandora Fms
Name of the Vulnerable Software and Affected Versions: Pandora FMS versions 700 through 774 Description: The issue affects Pandora FMS, allowing Cross-Site Scripting XSS due to improper neutralization of input during web page generation. Malicious code could be executed in the File Manager sectio...
KodExplorer Code Issue Vulnerability
KodExplorer is a web file manager by the individual developer warlee. A code issue vulnerability exists in KodExplorer version 4.51.03, which stems from a manipulation of parameter paths that can lead to server-side request forgery...
KodExplorer Code Injection Vulnerability
KodExplorer is a web file manager by the individual developer warlee. A code injection vulnerability exists in KodExplorer version 4.51.03, which stems from a manipulation that could lead to code injection...
KodExplorer Code Issue Vulnerability
KodExplorer is a web file manager by the individual developer warlee. A code issue vulnerability exists in KodExplorer version 4.51.03, which stems from a manipulation that can lead to server-side request forgery...
The vulnerability of the Bitrix24 business management service lies in the absence of a proper HTTP response header, allowing attackers to execute arbitrary JavaScript code.
The vulnerability of the bitrix/modules/main/tools.php component of the Bitrix24 business management service is related to the absence of a MIME response header. Exploiting this vulnerability allows an attacker to execute arbitrary JavaScript code by uploading a created HTML file through...
Yamcs Cross-Site Scripting Vulnerability
Yamcs is an open source software framework from Yamcs Open Source. It is used to command and control spacecraft, satellites, payloads, ground stations and ground equipment. A security vulnerability exists in Yamcs version 5.8.6, which originates from a session cookie that can be obtained by...
The vulnerability of the Ad Hoc Transfer module of the WS_FTP Server allows attackers to carry out cross-site scripting attacks.
The vulnerability of the Ad Hoc Transfer module of the WSFTP Server server is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
KodExplorer cross-site scripting vulnerability (CNVD-2023-72248)
KodExplorer is a web file manager. A cross-site scripting vulnerability exists in KodExplorer version 4.45. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data in /index.php, which can be exploited by an attacker to execute arbitrary web script or HTML ...
KodExplorer 跨站脚本漏洞
KodExplorer is a web file manager. A cross-site scripting vulnerability exists in KodExplorer version 4.45. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data in /index.php, which can be exploited by an attacker to execute arbitrary web script or HTML ...
CVE-2023-34747
File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload...
CVE-2023-34747
File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload...
CVE-2023-34878
An issue was discovered in Ujcms v6.0.2 allows attackers to gain sensitive information via the dir parameter to /api/backend/core/web-file-html/download-zip...
Unrestricted file upload
File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload...
Hardcoded credentials
An issue was discovered in Ujcms v6.0.2 allows attackers to gain sensitive information via the dir parameter to /api/backend/core/web-file-html/download-zip...
CVE-2023-34747
CVE-2023-34747 corresponds to a file upload vulnerability in ujcms 6.0.2, exploitable via the API endpoint /api/backend/core/web-file-upload/upload. The issue is described as an unrestricted file upload that can impact confidentiality, integrity, and availability (CVSS v3.1: 9.8 CRITICAL, Network...
