CVE-2025-46080

버그 작성자: yggcwhat 영향받는 버전: Huocms 공급업체: https://huocms.com/ 소스 코드 주소: https://gitee.com/digital-flag/huocms 취약점 파일: AttachmentController.php 영향받는 버전： HuoCMS - controller -backend - AttachmentController.php:editFileUrl editFileUrl 메서드에서 호출되는 copy 함수의 $newPathUrl 접미사는 화이트리스트로 검증되지 않아 파일 이름을 수정하는 데 악...

CVE-2026-86285 BookStack Attachment Edit Endpoint AttachmentController.php getUpdateForm access control

A vulnerability was detected in BookStack up to 26.05.2. Affected by this issue is the function AttachmentController::getUpdateForm of the file app/Uploads/Controllers/AttachmentController.php of the component Attachment Edit Endpoint. The manipulation of the argument ID results in improper acces...

CVE-2023-27084

Permissions vulnerability found in isoftforce Dreamer CMS v.4.0.1 allows local attackers to obtain sensitive information via the AttachmentController parameter...

CVE-2024-43033

JPress through 5.1.1 on Windows has an arbitrary file upload vulnerability that could cause arbitrary code execution via ::$DATA to AttachmentController, such as a .jsp::$DATA file to io.jpress.web.commons.controller.AttachmentControllerupload. NOTE: this is unrelated to the attack vector for...

CVE-2024-43033

JPress through 5.1.1 on Windows has an arbitrary file upload vulnerability that could cause arbitrary code execution via ::$DATA to AttachmentController, such as a .jsp::$DATA file to io.jpress.web.commons.controller.AttachmentControllerupload. NOTE: this is unrelated to the attack vector for...

CVE-2024-43033

JPress versions through 5.1.1 on Windows are vulnerable to an arbitrary file upload vulnerability. The root cause is the improper handling of Windows ::$DATA alternate data streams within the io.jpress.web.commons.controller.AttachmentController#upload function. An attacker can exploit this to up...

CVE-2024-43033: Improper Handling of Windows ::DATA Alternate Data Stream

JPress through 5.1.1 on Windows has an arbitrary file upload vulnerability that could cause arbitrary code execution via ::$DATA to AttachmentController, such as a .jsp::$DATA file to io.jpress.web.commons.controller.AttachmentControllerupload. NOTE: this is unrelated to the attack vector for...

Design/Logic Flaw

Permissions vulnerability found in isoftforce Dreamer CMS v.4.0.1 allows local attackers to obtain sensitive information via the AttachmentController parameter...

CVE-2023-27084: Incorrect Permission Assignment for Critical Resource

Permissions vulnerability found in isoftforce Dreamer CMS v.4.0.1 allows local attackers to obtain sensitive information via the AttachmentController parameter...

CVE-2023-27084

Permissions vulnerability found in isoftforce Dreamer CMS v.4.0.1 allows local attackers to obtain sensitive information via the AttachmentController parameter...

Dreamer CMS 安全漏洞

Dreamer CMS is a dreamer content management system by the individual developer Junnan Wang in China. A security vulnerability exists in isoftforce Dreamer CMS version v.4.0.1, which stems from a privilege vulnerability that can be exploited by a local attacker to gain access to sensitive...

CVE-2023-27084

CVE-2023-27084 concerns a permissions issue in isoftforce Dreamer CMS v4.0.1 that lets a local attacker access sensitive data via the AttachmentController parameter. The vulnerability is described as a local-attack, high confidentiality impact with medium overall CVSS (5.3) and no user interactio...

FineCMS AttachmentController arbitrary file upload vulnerability

Source link: http://www.hackersb.cn/shenji/170.html Is still AttachmentController, of course, this is no longer kindeditorupload upload the file and then include the file so simple, but directly uploaded the script execution. This time the problem is ajaxswfuploadAction method, the method code is...