CVE-2023-30185

CVE-2023-30185 affects CRMEB versions 4.4–4.6 and involves an arbitrary file upload vulnerability via the attachment/SystemAttachmentServices.php component. The issue is documented with a critical CVSS v3.1 score (9.8) affecting confidentiality, integrity, and availability. The connected sources ...

CVE-2022-46610

72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-46135

CVE-2022-46135 affects AeroCms v0.0.1. The vulnerability is an arbitrary file upload at /admin/posts.php?source=edit_post that enables uploading a webshell and taking control of the web server. Affected component is the upload endpoint in the admin/post editing flow; root cause details are consis...

CVE-2022-40200 WordPress wpForo Forum plugin <= 2.0.9 - Auth. Arbitrary File Upload vulnerability

Auth. subscriber+ Arbitrary File Upload vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

CVE-2022-41539

Wedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /admin/usersadd.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-41534

CVE-2022-41534 affects Online Diagnostic Lab Management System v1.0. The connected documents confirm an arbitrary file upload vulnerability in the component /php_action/createOrder.php that enables an attacker to execute arbitrary PHP code via a crafted file. This is the core technical detail; no...

CVE-2022-29001

The CVE-2022-29001 entry affects SpringBootMovie

zbzcms arbitrary file upload vulnerability

zbzcms station helper CMS is a content management website of China station helper CMS zbzcms company. zbzcms version 1.0 has an arbitrary file upload vulnerability, which can be exploited by attackers to execute arbitrary code via specially crafted PHP files...

CVE-2022-27064

CVE-2022-27064 : In Musical World v1, an arbitrary file upload vulnerability in uploaded_songs.php allows remote code execution via a crafted PHP file. Public PoCs show uploading a shell to /songs/uploaded_songs/shell.php due to missing file validation. Connected advisories (Red Hat RH:CVE-2022-2...

CVE-2022-26871

An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution. Recent assessments: jbaines-r7 at April 15, 2022 5:40pm UTC reported: On March 29, 2022, Trend Micro released a...

CVE-2022-23315

MCMS v5.2.4 is affected by an arbitrary file upload vulnerability in the component /ms/template/writeFileContent.do. The root cause, as described across connected sources, is insufficient validation/filtration of uploaded file types, enabling attackers to upload arbitrary files. This impacts conf...

WordPress Extra premium theme <= 4.5.2 - Authenticated Arbitrary File Upload vulnerability

Authenticated Arbitrary File Upload vulnerability discovered by WordFence in WordPress Extra premium theme versions = 4.5.2. Solution Update the WordPress Extra premium theme to the latest available version at least 4.5.3...

IBM Planning Analytics Local Multiple Security Vulnerabilities

Description IBM Planning Analytics Local is prone to the following security vulnerabilities: 1. An arbitrary file-upload vulnerability 2. A cross-site scripting vulnerability An attacker may leverage these issues to upload arbitrary files or execute arbitrary script code in the browser of an...

Real Estate Portal 4.1 - Multiple Vulnerabilities

Real Estate Portal 4.1 - Multiple Vulnerabilities Real Estate Portal v4.1 Remote Code Execution Vulnerability Vendor: NetArt Media Product web page: http://www.netartmedia.net Affected version: 4.1 Summary: Real Estate Portal is a software written in PHP, allowing you to launch powerful and...

FineCms 免费版任意文件上传漏洞

路径：dayrui/libraries/Chart/ofcuploadimage.php $defaultpath = '../tmp-upload-images/'; if !fileexists$defaultpath mkdir$defaultpath, 0777, true; $destination = $defaultpath . basename $GET 'name' ; echo 'Saving your image to: '. $destination; $jfh = fopen$destination, 'w' or die"can't open file";...

WordPress Shopping Cart 3.0.4 --任意文件上传

受影响版本: WordPress Shopping Cart 3.0.4 日期: 29-10-2014 软件链接: https://wordpress.org/plugins/wp-easycart/ CVE: CVE-2014-9308 类别: 应用程序漏洞详情：任何注册用户都可以上传任何文件。上传点: wp-easycart\inc\amfphp\administration\banneruploaderscript.php$date = $POST'datemd5';$usersqlquery = sprintf"SELECT ecuser., ecrole.adminaccess...

Complete Gallery Manager 3.3.3 - Arbitrary File Upload

The complete-gallery-manager WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

wpStoreCart 2.5.27-2.5.29 - Arbitrary File Upload

The wpstorecart WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

Acuity CMS 2.6.2 - adminfile_managerfile_upload_submit.asp Multiple Arbitrary File Upload Code Executions

Acuity CMS 2.6.2 - adminfilemanagerfileuploadsubmit.asp Multiple Arbitrary File Upload Code Executions source: https://www.securityfocus.com/bid/53616/info Acuity CMS is prone to a directory-traversal vulnerability and an arbitrary-file-upload vulnerability. An attacker can exploit these issues t...

PHPnuke MT 8.3.5 ckfinder Shell Upload

Exploit Title: PHPnuke MT 8.3.5 ckfinder Plugin Arbitrary File upload Vulnerability Date: 2011 06 27 GMT +7 Author: Net.Edit0r Software Link: http://www.phpnuke.ir/ Version : 8.3.5 Tested on: ubuntu 11.04 Centos CVE : - ---------------------------------------------------------------------------...