Privilege escalation

Docebo Community Edition v4.0.5 and below was discovered to contain an arbitrary file upload vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

Privilege escalation

Laiketui 3.5.0 is affected by an arbitrary file upload vulnerability that can allow an attacker to execute arbitrary code...

CVE-2021-40954

Laiketui 3.5.0 is affected by an arbitrary file upload vulnerability that can allow an attacker to execute arbitrary code...

CVE-2021-40954

CVE-2021-40954 affects Laiketui 3.5.0. The connected documents confirm an arbitrary file upload vulnerability in Laiketui that can allow an attacker to execute arbitrary code. Affected component is the file upload mechanism within Laiketui 3.5.0; root cause specifics are not provided in the docum...

CVE-2021-40954

Laiketui 3.5.0 is affected by an arbitrary file upload vulnerability that can allow an attacker to execute arbitrary code...

CVE-2021-40954: Unrestricted Upload of File with Dangerous Type

Laiketui 3.5.0 is affected by an arbitrary file upload vulnerability that can allow an attacker to execute arbitrary code...

Docebo Community Edition 代码问题漏洞

Docebo Community Edition is a learning suite from Docebo Canada. A code issue vulnerability exists in Docebo Community Edition version v4.0.5 and prior versions, which stems from a contained arbitrary file upload vulnerability...

PT-2022-11344

Name of the Vulnerable Software and Affected Versions Laiketui version 3.5.0 Description The issue allows an attacker to upload arbitrary files, potentially enabling the execution of arbitrary code. Recommendations For Laiketui version 3.5.0, update to a version that fixes this issue, if availabl...

CVE-2022-31362

Docebo Community Edition v4.0.5 and below was discovered to contain an arbitrary file upload vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2022-31362

CVE-2022-31362 affects Docebo Community Edition v4.0.5 and earlier. Multiple sources document an arbitrary file upload vulnerability in these unsupported versions; the exact root cause is not detailed in the provided materials. Some advisories (e.g., PT-2022-20717) suggest temporarily restricting...

CVE-2021-38945

IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 could allow a remote attacker to upload arbitrary files, caused by improper content validation. IBM X-Force ID: 211238...

PT-2022-20717 · Docebo · Docebo Community Edition

Name of the Vulnerable Software and Affected Versions: Docebo Community Edition versions 4.0.5 and below Description: The issue is related to an arbitrary file upload vulnerability. It is noted that this vulnerability only affects products that are no longer supported by the maintainer...

CVE-2022-31362: Unrestricted Upload of File with Dangerous Type

Docebo Community Edition v4.0.5 and below was discovered to contain an arbitrary file upload vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2022-31374

An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file...

Privilege escalation

An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file...

CVE-2022-31374

The Contec SolarView Compact v6.0 application is susceptible to a Remote Code Execution (RCE) vulnerability. The root cause is a failure in Solar_Image.php to properly filter special elements within the construction snippet, which allows an attacker to perform an arbitrary file upload at the /ima...

PT-2022-20723

Name of the Vulnerable Software and Affected Versions SolarView Compact version 6.0 Description The issue allows attackers to execute arbitrary code via a crafted php file, exploiting an arbitrary file upload vulnerability in the /images/background/1.php endpoint. Recommendations For SolarView...

CVE-2022-31374: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file...

CVE-2022-1939 Allow SVG Files < 1.1 - Admin+ Arbitrary File Upload

The Allow svg files WordPress plugin before 1.1 does not properly validate uploaded files, which could allow high privilege users such as admin to upload PHP files even when they are not allowed to...

PT-2022-3528

Name of the Vulnerable Software and Affected Versions SEPCOS Single Package affected versions not specified Description The issue is related to the bypassing of controls that limit uploads to certain file extensions. This could allow an attacker to intercept and modify the initial file upload pag...