CVE-2022-46102: Unrestricted Upload of File with Dangerous Type

AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fstdown.inc.php...

AyaCMS 代码问题漏洞

AyaCMS is an extremely simple and free open source PHP website builder. A security vulnerability exists in AyaCMS version v3.1.2, which originates from uploading arbitrary files via /aya/module/admin/fstdown.inc.php...

ClassCMS 代码问题漏洞

ClassCMS is a simple, flexible, secure and easy-to-expand content management system in China. A security vulnerability exists in ClassCMS version 3.5, which originates from an arbitrary file upload in the file management functional module...

CVE-2022-45966

here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5...

CVE-2022-45966

CVE-2022-45966 affects ClassCMS 3.5, describing an arbitrary file upload vulnerability in the file management function/module. The issue is rooted in the file upload handling (improper validation/verification) and is rated CVSSv3.1 9.8 (Network, High privileges not required, no user interaction) ...

CVE-2022-45966

here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5...

CVE-2022-46102

AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fstdown.inc.php...

CVE-2022-46102

AyaCMS 3.1.2 is vulnerable to arbitrary file upload via /aya/module/admin/fst_down.inc.php. The provided documents identify the vulnerable endpoint but do not disclose the exact root cause, affected components beyond the path, or concrete remediation details. The CVSS metrics in the primary entry...

CVE-2022-4061

The JobBoardWP WordPress plugin before 1.2.2 does not properly validate file names and types in its file upload functionalities, allowing unauthenticated users to upload arbitrary files such as PHP...

CVE-2022-4061 JobBoardWP < 1.2.2 - Unauthenticated Arbitrary File Upload

The JobBoardWP WordPress plugin before 1.2.2 does not properly validate file names and types in its file upload functionalities, allowing unauthenticated users to upload arbitrary files such as PHP...

CVE-2022-32573

A directory traversal vulnerability exists in the AssetActions.aspx addDoc functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary file upload. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2022-32573

A directory traversal vulnerability exists in the AssetActions.aspx addDoc functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary file upload. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2022-29517

CVE-2022-29517 is a directory traversal vulnerability in Lansweeper 10.1.1.0, affecting the HelpdeskActions.aspx edittemplate feature. Cisco Talos confirms an exploitable path where inline attachments (inlineattachment + inlineattachmentname) can be uploaded to arbitrary locations due to unsaniti...

CVE-2022-29517

A directory traversal vulnerability exists in the HelpdeskActions.aspx edittemplate functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary file upload. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2022-29517

A directory traversal vulnerability exists in the HelpdeskActions.aspx edittemplate functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary file upload. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2022-32573

CVE-2022-32573 is a directory-traversal vulnerability in Lansweeper 10.1.1.0 affecting AssetActions.aspx addDoc. A crafted HTTP request can upload arbitrary files due to unsanitized txtdocname and path concatenation, enabling arbitrary file upload to DOCS. Cisco Talos confirms the vulnerability a...

CVE-2022-4061: Undefined Security Weakness

The JobBoardWP WordPress plugin before 1.2.2 does not properly validate file names and types in its file upload functionalities, allowing unauthenticated users to upload arbitrary files such as PHP...

CVE-2022-32573: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability exists in the AssetActions.aspx addDoc functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary file upload. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2022-29517: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability exists in the HelpdeskActions.aspx edittemplate functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary file upload. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2022-46135

In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=editpost , through which we can upload webshell and control the web server...