12 matches found
CVE-2021-27984
In Pluck-4.7.15 admin background a remote command execution vulnerability exists when uploading files...
CVE-2021-27984
In Pluck-4.7.15 admin background a remote command execution vulnerability exists when uploading files...
Design/Logic Flaw
In Pluck-4.7.15 admin background a remote command execution vulnerability exists when uploading files...
CVE-2021-27984
In Pluck-4.7.15 admin background a remote command execution vulnerability exists when uploading files...
CVE-2021-27984
In Pluck-4.7.15 admin background a remote command execution vulnerability exists when uploading files...
PT-2021-17702
Name of the Vulnerable Software and Affected Versions: Pluck version 4.7.15 Description: A remote command execution issue exists in the admin background when uploading files. Recommendations: For Pluck version 4.7.15, update to a version that fixes the remote command execution vulnerability. At t...
CVE-2021-27984: Unrestricted Upload of File with Dangerous Type
In Pluck-4.7.15 admin background a remote command execution vulnerability exists when uploading files...
CVE-2020-20343
WTCMS 1.0 contains a cross-site request forgery CSRF vulnerability in the index.php?g=admin&m=nav&a=addpost component that allows attackers to arbitrarily add articles in the administrator background...
CVE-2020-20343
CVE-2020-20343 : WTCMS 1.0 is vulnerable to a cross-site request forgery (CSRF) in the admin navigation add_post path (index.php?g=admin&m=nav&a=add_post). Exploitation would allow an attacker to cause arbitrary article creation in the administrator background. The vulnerability details are descr...
CVE-2020-20951
In Pluck-4.7.10-dev2 admin background, a remote command execution vulnerability exists when uploading files...
CVE-2020-20951
In Pluck-4.7.10-dev2 admin background, a remote command execution vulnerability exists when uploading files...
CVE-2020-20951: Improper Neutralization of Special Elements used in a Command
In Pluck-4.7.10-dev2 admin background, a remote command execution vulnerability exists when uploading files...