17332 matches found
Roxy Fileman 1.4.6 Remote Shell Upload
Exploit Title: Roxy Fileman Vendor Homepage: roxyfileman.com Software Link: https://web.archive.org/web/20210126213412/https://roxyfileman.com/download.php?f=1.4.6-php Version: \t\n' banner += '\t\t\t\t\t\t\n' banner += '\n' parser = OptionParser parser.addoption"-u", "--url", dest="url", help="u...
DedeCMS Arbitrary File Upload Vulnerability (CNVD-2022-80695)
DedeCMS Weaving Dream Content Management System is a PHP-based open source content management system CMS. The system has content publishing, content management, content editing and content retrieval functions.An arbitrary file upload vulnerability exists in the /dede/filemanagecontrol.php compone...
CVE-2022-42698
Unauth. Arbitrary File Upload vulnerability in WordPress Api2Cart Bridge Connector plugin = 1.1.0 on WordPress...
CVE-2022-42698 WordPress Api2Cart Bridge Connector plugin <= 1.1.0 - Arbitrary File Upload vulnerability
Unauth. Arbitrary File Upload vulnerability in WordPress Api2Cart Bridge Connector plugin = 1.1.0 on WordPress...
CVE-2022-42698
CVE-2022-42698 affects the WordPress plugin Api2Cart Bridge Connector (versions ≤ 1.1.0). The root cause is an unauthenticated Arbitrary File Upload due to insufficient input/file validation in the plugin, enabling an attacker to upload arbitrary files via the vulnerable endpoint. Impact is high:...
WordPress plugin Api2Cart Bridge Connector 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
Hoosk CMS Arbitrary File Upload Vulnerability
Hoosk CMS is a lightweight content management system. Hoosk CMS v1.8.0 suffers from an arbitrary file upload vulnerability that stems from its /attachments component failing to validate uploaded files. An attacker can exploit the vulnerability to remotely execute code...
PT-2022-26507 · WordPress · Wordpress Api2Cart Bridge Connector
Name of the Vulnerable Software and Affected Versions: WordPress Api2Cart Bridge Connector plugin version 1.1.0 and earlier Description: The issue concerns an Unauth. Arbitrary File Upload vulnerability. Recommendations: For WordPress Api2Cart Bridge Connector plugin version 1.1.0 and earlier,...
CVE-2022-42698: Unrestricted Upload of File with Dangerous Type
Unauth. Arbitrary File Upload vulnerability in WordPress Api2Cart Bridge Connector plugin = 1.1.0 on WordPress...
rConfig <= 3.x Arbitrary File Upload Vulnerability
rConfig is prone to an arbitrary file upload vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:rconfig:rconfig"; if...
CVE-2022-40200
Auth. subscriber+ Arbitrary File Upload vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...
CVE-2022-40200
Auth. subscriber+ Arbitrary File Upload vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...
Privilege escalation
Auth. subscriber+ Arbitrary File Upload vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...
CVE-2022-43192
An arbitrary file upload vulnerability in the component /dede/filemanagecontrol.php of Dedecms v5.7.101 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is related to an incomplete fix for CVE-2022-40886...
CVE-2022-43192
An arbitrary file upload vulnerability in the component /dede/filemanagecontrol.php of Dedecms v5.7.101 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is related to an incomplete fix for CVE-2022-40886...
Design/Logic Flaw
An arbitrary file upload vulnerability in the component /dede/filemanagecontrol.php of Dedecms v5.7.101 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is related to an incomplete fix for CVE-2022-40886...
CVE-2022-40200 WordPress wpForo Forum plugin <= 2.0.9 - Auth. Arbitrary File Upload vulnerability
Auth. subscriber+ Arbitrary File Upload vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...
CVE-2022-40200
The CVE CVE-2022-40200 affects the WordPress wpForo Forum plugin prior to 2.0.9. Authenticated users (subscriber+) can upload arbitrary files due to a vulnerability in the plugin, enabling potential unauthorized file writes. The issue is documented across multiple sources (NVD/NVD-derived records...