Design/Logic Flaw

An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP file...

TPCMS 代码问题漏洞

TPCMS, an open source content management system from the individual developers of Source of Happiness, is vulnerable to an arbitrary file upload vulnerability in version v3.2, which stems from a lack of validation of uploaded files by the application. An attacker could exploit this vulnerability ...

CVE-2021-45982: Unrestricted Upload of File with Dangerous Type

NetScout nGeniusONE 6.3.2 allows Arbitrary File Upload by a privileged user...

Netscout NgeniusOne 代码问题漏洞

Netscout NgeniusOne is a centralized application management and network performance solution from Netscout, Inc. A security vulnerability exists in Netscout NgeniusOne version 6.3.2, which can be exploited by attackers to upload arbitrary files...

Creatiwity wityCMS 代码问题漏洞

Creatiwity wityCMS is a lightweight PHP-based content management system CMS. A security vulnerability exists in Creatiwity wityCMS version 0.6.2, which stems from an arbitrary file upload vulnerability in the image upload component. The vulnerability can be exploited by an attacker to execute...

Wedding Management System 代码问题漏洞

Wedding Management System v1.0 is an arbitrary file upload vulnerability in the packageedit.php page, which is caused by a lack of validation of the image upload port on the packageedit.php page. The vulnerability is caused by the lack of validation of uploaded files on the packageedit.php page,...

WordPress HTML2WP plugin <= 1.0.0 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Daniel Ruf in WordPress HTML2WP plugin versions = 1.0.0. Solution Deactivate and delete. This plugin has been closed as of May 4, 2022 and is not available for download. This closure is temporary, pending a full review...

Wedding Management System 代码问题漏洞

Wedding Management System is a wedding planning management system by John Paul Lim Gabule, a personal developer. v1.0 of Wedding Management System is vulnerable to arbitrary file uploads, which can be exploited by attackers to upload malicious files and remotely execute arbitrary code...

PT-2022-12483

Name of the Vulnerable Software and Affected Versions NetScout nGeniusONE version 6.3.2 Description The issue allows for Arbitrary File Upload by a privileged user. Recommendations For NetScout nGeniusONE version 6.3.2, consider restricting file upload capabilities for privileged users until a...

Carrier LenelS2 HID Mercury access panels 路径遍历漏洞

Carrier LenelS2 HID Mercury access panels is a controller panel from Carrier, U.S. A path traversal vulnerability exists in Carrier LenelS2 HID Mercury access panels, which could be exploited to send specially crafted HTTP requests to upload arbitrary files to an arbitrary location on the system...

CVE-2022-29624

An arbitrary file upload vulnerability in the Add File function of TPCMS v3.2 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-29624

TPCMS v3.2 contains an arbitrary file upload vulnerability in the Add File function that can allow an attacker to execute arbitrary PHP code via a crafted file. The issue stems from insufficient validation of uploaded files, enabling remote code execution. Affected product: TPCMS 3.2 (open‑source...

CVE-2022-30819

In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "photosedit.php" file...

CVE-2022-30819

CVE-2022-30819 affects Wedding Management System v1.0, with an arbitrary file upload vulnerability at the photos_edit.php picture upload point. The root cause cited across sources is a lack of validation of uploaded files, enabling attackers to upload malicious files. Associated documents (CNVD/C...

CVE-2022-30820

In Wedding Management v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "usersedit.php" file...

CVE-2022-30820

CVE-2022-30820 affects Wedding Management v1.0. The vulnerability is an arbitrary file upload at the picture upload point in users_edit.php, enabling upload of potentially malicious files. CVSS v3.1 base score is 8.8 (HIGH) with network access and no authentication, according to the NVD entry; CV...

CVE-2022-30821

In Wedding Management System v1.0, the editing function of the "Services" module in the background management system has an arbitrary file upload vulnerability in the picture upload point of "packageedit.php" file...

CVE-2022-30821

CVE-2022-30821 affects Wedding Management System v1.0: the Services module’s package_edit.php picture upload point lacks file validation, enabling arbitrary file upload in the background management system. CNVD notes potential remote code execution via this vulnerability; no specific exploit deta...

CVE-2022-30822

In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "usersprofile.php" file...

CVE-2022-30822

The CVE-2022-30822 entry concerns Wedding Management System v1.0, where an arbitrary file upload vulnerability exists at the picture upload point in users_profile.php. Multiple connected sources describe it as enabling upload of malicious files, with some noting potential remote code execution. T...