CVE-2025-9173

CVE-2025-9173 is tied to Emlog Pro up to 2.5.18. The issue stems from improper handling of file uploads in /admin/media.php?action=upload&sid=0, where manipulation of the File argument can enable an unrestricted upload. Remote exploitation is possible per sources, with a publicly available exploi...

Voyager 安全漏洞

Voyager is an application by David Borland, an individual developer. A security vulnerability exists in Voyager version 1.8.0 and earlier, which stems from the ease of bypassing file type validation when an authenticated user uploads a file via /admin/media/upload...

Arbitrary File Upload

Overview Affected versions of this package are vulnerable to Arbitrary File Upload at the /admin/media/upload, which checks file types in the upload function. An authenticated user with the browsemedia privilege can provide a file spoofing one of the allowedMimeTypes, that contains malicious code...

GHSA-7F84-9CQF-G4J9 Camaleon CMS vulnerable to Stored Cross-site Scripting

In the 2.4 version of Camaleon CMS, Stored XSS has been discovered. The profile image in the User settings section can be run in the update / upload area via /admin/media/upload?actions=false...

Cross-site Scripting (XSS)

Overview camaleoncms is a dynamic and advanced content management system based on Ruby on Rails as an alternative to Wordpress. Affected versions of this package are vulnerable to Cross-site Scripting XSS when the profile image in the User settings section can be run in the update or in the uploa...

ZKEACMS 代码问题漏洞

ZKEACMS is an open source visually designed, WYSIWYG content management system. version 3.2.0 of ZKEACMS contains a security vulnerability that stems from an arbitrary file upload vulnerability in the application's "/admin/media/upload", which could be exploited to execute arbitrary code via a...

CVE-2019-17536

Gila CMS through 1.11.4 allows Unrestricted Upload of a File with a Dangerous Type via the moveAction function in core/controllers/fm.php. The attacker needs to use admin/mediaupload and fm/move...