14855 matches found
CVE-2020-36701
CVE-2020-36701 concerns the WordPress plugin Page Builder: KingComposer . The vulnerability is Arbitrary File Upload via the function process_bulk_action in kingcomposer/includes/kc.extensions.php , affecting versions up to and including 2.9.3 . authenticated users with author+ permissions can up...
PT-2023-24402 · Phpok · Phpok
Name of the Vulnerable Software and Affected Versions: phpok version 6.4.100 Description: The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability in the "/admin.php?c=upload" API endpoint, specifically the c parameter set to...
CVE-2023-33601
CVE-2023-33601 describes an arbitrary file upload vulnerability in the PHPok web application (version 6.4.100). The flaw resides in the /admin.php?c=upload endpoint, allowing an attacker to upload a crafted PHP file to achieve arbitrary code execution. The provided connected documents confirm the...
CVE-2023-33601
An arbitrary file upload vulnerability in /admin.php?c=upload of phpok v6.4.100 allows attackers to execute arbitrary code via a crafted PHP file...
PHPOK 代码问题漏洞
PHPOK is an enterprise website building system with extended support. A security vulnerability exists in PHPOK version 6.4.100, which originates from an arbitrary file upload vulnerability. The vulnerability can be exploited by an attacker to execute arbitrary code by uploading a specially crafte...
PT-2023-10352 · WordPress · Delete All Comments
Name of the Vulnerable Software and Affected Versions: Delete All Comments plugin for WordPress versions up to, and including, 2.0 Description: The issue arises from missing file type validation in the delete-all-comments.php file, allowing unauthenticated attackers to upload arbitrary files on t...
PT-2023-12494 · WordPress · Wordpress
Name of the Vulnerable Software and Affected Versions: Recently plugin for WordPress versions up to, and including, 3.0.4 Description: The issue arises from missing file type validation in the fetch external image function, allowing authenticated attackers to upload arbitrary files on the server,...
CVE-2023-33601
An arbitrary file upload vulnerability in /admin.php?c=upload of phpok v6.4.100 allows attackers to execute arbitrary code via a crafted PHP file...
Advantech WebAccess/SCADA Arbitrary File Upload Vulnerability (CNVD-2024-15541)
Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, China. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. An arbitrary file upload vulnerability exists i...
CVE-2023-22450
In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to upload an ASP script file to a webserver when logged in as manager user, which can lead to arbitrary code execution...
CVE-2023-22450
In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to upload an ASP script file to a webserver when logged in as manager user, which can lead to arbitrary code execution...
Design/Logic Flaw
In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to modify the file extension of a certificate file to ASP when uploading it, which can lead to remote code execution...
CVE-2023-22450
In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to upload an ASP script file to a webserver when logged in as manager user, which can lead to arbitrary code execution...
CVE-2023-22450
In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to upload an ASP script file to a webserver when logged in as manager user, which can lead to arbitrary code execution...
CVE-2023-32628
CVE-2023-32628 affects Advantech WebAccess/SCADA versions 9.1.3 and earlier. An arbitrary file upload vulnerability could let an attacker modify a certificate file’s extension to ASP when uploading, enabling remote code execution. Mitigation per CISA ICS advisory is to upgrade to WebAccess/SCADA ...
CVE-2023-32628
In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to modify the file extension of a certificate file to ASP when uploading it, which can lead to remote code execution...
CVE-2023-32628
In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to modify the file extension of a certificate file to ASP when uploading it, which can lead to remote code execution...
CVE-2023-33386
MarsCTF 1.2.1 has an arbitrary file upload vulnerability in the interface for uploading attachments in the background...