17360 matches found
Design/Logic Flaw
The Import any XML or CSV File to WordPress plugin before 3.6.8 accepts all zip files and automatically extracts the zip file without validating the extracted file type. Allowing high privilege users such as admin to upload an arbitrary file like PHP, leading to RCE...
CVE-2022-2268 WP All Import < 3.6.8 - Admin+ Arbitrary File Upload
The Import any XML or CSV File to WordPress plugin before 3.6.8 accepts all zip files and automatically extracts the zip file without validating the extracted file type. Allowing high privilege users such as admin to upload an arbitrary file like PHP, leading to RCE...
Unrestricted Upload of File with Dangerous Type in MCMS
MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability...
GHSA-4828-473V-37GH Unrestricted Upload of File with Dangerous Type in MCMS
MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability...
CVE-2022-31943
MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability...
CVE-2022-31943
MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability...
CVE-2022-31943
MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability...
Privilege escalation
MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability...
CVE-2022-31943
MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability...
CVE-2022-31943
MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability...
CVE-2022-31943
CVE-2022-31943 affects MCMS v5.2.8 and is a validated arbitrary file upload vulnerability. Red Hat’s RH:CVE entry corroborates the issue; NVD metrics rate it as Critical (CVSSv3.1 9.8) with network access and no user interaction required. The initial data confirms the affected product and vulnera...
WP All Import < 3.6.8 - Admin+ Arbitrary File Upload
The plugin accepts all zip files and automatically extracts the zip file without validating the extracted file type. Allowing high privilege users such as admin to upload an arbitrary file like PHP, leading to RCE As an admin upload a php file containing the palyload zipped along with a valid XML...
PT-2022-20990 · Mcms · Mcms
Name of the Vulnerable Software and Affected Versions: MCMS version 5.2.8 Description: The issue is related to an arbitrary file upload vulnerability. This means that an attacker could potentially upload malicious files to the system, which could lead to various security problems. Recommendations...
WP All Import < 3.6.8 - Admin+ Arbitrary File Upload
The plugin accepts all zip files and automatically extracts the zip file without validating the extracted file type. Allowing high privilege users such as admin to upload an arbitrary file like PHP, leading to RCE PoC As an admin upload a php file containing the palyload zipped along with a valid...
CVE-2022-31943: Unrestricted Upload of File with Dangerous Type
MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability...
MingSoft MCMS 代码问题漏洞
MingSoft MCMS is a complete open source J2ee system from China's MingSoft. A security vulnerability exists in MingSoft MCMS v5.2.8, which contains an arbitrary file upload vulnerability...
WordPress HTML2WP plugin arbitrary file upload vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress HTML2WP plugin 1.0.0 and earlier versions contain an arbitrary file upload vulnerability th...
CVE-2022-32994
Halo CMS v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the component /api/admin/attachments/upload...