16315 matches found
CVE-2022-45427: Unrestricted Upload of File with Dangerous Type
Some Dahua software products have a vulnerability of unrestricted upload of file. After obtaining the permissions of administrators, by sending a specific crafted packet to the vulnerable interface, an attacker can upload arbitrary files...
WordPress Plugin WooCommerce 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...
WordPress Yith WooCommerce Gift Cards Premium 3.19.0 Shell Upload Vulnerability
Description: Unauthenticated Arbitrary File Upload Affected Plugin: Yith WooCommerce Gift Cards Premium Plugin Slug: yith-woocommerce-gift-cards-premium Affected Versions: = 3.19.0 CVE ID: CVE-2022-45359 CVSS Score: 9.8 Critical CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N...
WordPress Yith WooCommerce Gift Cards Premium 3.19.0 Shell Upload
Description: Unauthenticated Arbitrary File Upload Affected Plugin: Yith WooCommerce Gift Cards Premium Plugin Slug: yith-woocommerce-gift-cards-premium Affected Versions: = 3.19.0 CVE ID: CVE-2022-45359 CVSS Score: 9.8 Critical CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N...
CVE-2022-46493
Default version of nbnbk was discovered to contain an arbitrary file upload vulnerability via the component /api/User/downloadimg...
Design/Logic Flaw
Default version of nbnbk was discovered to contain an arbitrary file upload vulnerability via the component /api/User/downloadimg...
CVE-2022-46102
AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fstdown.inc.php...
CVE-2022-46102
AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fstdown.inc.php...
PSA: YITH WooCommerce Gift Cards Premium Plugin Exploited in the Wild
The Wordfence Threat Intelligence team has been tracking exploits targeting a Critical Severity Arbitrary File Upload vulnerability in YITH WooCommerce Gift Cards Premium, a plugin with over 50,000 installations according to the vendor. The vulnerability, reported by security researcher Dave Jong...
CVE-2022-45966
here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5...
CVE-2022-45966
here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5...
Design/Logic Flaw
here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5...
CVE-2022-45966: Unrestricted Upload of File with Dangerous Type
here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5...
CVE-2022-46493: Unrestricted Upload of File with Dangerous Type
Default version of nbnbk was discovered to contain an arbitrary file upload vulnerability via the component /api/User/downloadimg...
CVE-2022-46493
Default version of nbnbk was discovered to contain an arbitrary file upload vulnerability via the component /api/User/downloadimg...
CVE-2022-46102
AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fstdown.inc.php...
PT-2022-27739 · Ayacms · Ayacms
Name of the Vulnerable Software and Affected Versions: AyaCMS version 3.1.2 Description: The issue concerns an arbitrary file upload vulnerability. It can be exploited via the /aya/module/admin/fst down.inc.php endpoint. Recommendations: For AyaCMS version 3.1.2, consider restricting access to th...
PT-2022-27702 · Classcms · Classcms
Name of the Vulnerable Software and Affected Versions: Classcms version 3.5 Description: The issue is related to an arbitrary file upload vulnerability in the file management function module. Recommendations: For Classcms version 3.5, consider restricting access to the file management function...
nbnbk 代码问题漏洞
nbnbk is based on thinkphp5 cms management system , B2C e-commerce open source php mall system platform , tp5 open source cms , thinkphp enterprise website source code for blogs , small and medium-sized enterprises to build a station secondary development . nbnbk There is a security vulnerability...