1622 matches found
Unrestricted file upload
eZiosuite v2.0.7 contains an authenticated arbitrary file upload via the Avatar upload functionality...
CVE-2022-26605
eZiosuite v2.0.7 contains an authenticated arbitrary file upload via the Avatar upload functionality...
Unrestricted Upload of File with Dangerous Type in WPanel 4
Multiple Remote Code Execution RCE vulnerabilities exist in WPanel 4 4.3.1 and below via a malicious PHP file upload to 1 Dashboard's Avatar image, 2 Posts Folder image, 3 Pages Folder image and 4 Gallery Folder image...
CVE-2021-34257
Multiple Remote Code Execution RCE vulnerabilities exist in WPanel 4 4.3.1 and below via a malicious PHP file upload to 1 Dashboard's Avatar image, 2 Posts Folder image, 3 Pages Folder image and 4 Gallery Folder image...
Remote code execution
Multiple Remote Code Execution RCE vulnerabilities exist in WPanel 4 4.3.1 and below via a malicious PHP file upload to 1 Dashboard's Avatar image, 2 Posts Folder image, 3 Pages Folder image and 4 Gallery Folder image...
CVE-2021-34257
Multiple Remote Code Execution RCE vulnerabilities exist in WPanel 4 4.3.1 and below via a malicious PHP file upload to 1 Dashboard's Avatar image, 2 Posts Folder image, 3 Pages Folder image and 4 Gallery Folder image...
WPanel 代码问题漏洞
WPanel is a CMS for building blogs, websites, and web applications. A security vulnerability exists in WPanel 4 4.3.1 and lower, which originates from uploading 1 dashboard avatar images, 2 post folder images, 3 page folder images, and 4 gallery folder images via malicious PHP files...
Unspecified vulnerability in halo (CNVD-2022-25189)
Halo is a personal blogging system for individual developers. A security vulnerability exists in Halo 1.4.14, which stems from the fact that the function point for uploading an avatar can upload any file, such as uploading an HTML file. No details of the vulnerability are provided at this time...
CVE-2021-43659
In halo 1.4.14, the function point of uploading the avatar, any file can be uploaded, such as uploading an HTML file, which will cause a stored XSS vulnerability...
CVE-2021-43659
In halo 1.4.14, the function point of uploading the avatar, any file can be uploaded, such as uploading an HTML file, which will cause a stored XSS vulnerability...
CVE-2021-43659
In halo 1.4.14, the function point of uploading the avatar, any file can be uploaded, such as uploading an HTML file, which will cause a stored XSS vulnerability...
Cross site scripting
In halo 1.4.14, the function point of uploading the avatar, any file can be uploaded, such as uploading an HTML file, which will cause a stored XSS vulnerability...
CVE-2021-43659
In halo 1.4.14, the function point of uploading the avatar, any file can be uploaded, such as uploading an HTML file, which will cause a stored XSS vulnerability...
Halo 跨站脚本漏洞
Halo is a personal blogging system for individual developers. A security vulnerability exists in Halo 1.4.14, which stems from the fact that the function point for uploading an avatar can upload any file, such as uploading an HTML file. No details of the vulnerability are provided at this time...
Drupal Avatar Upload 7.x-1.0-beta8 Cross Site Scripting
Exploit Title: Drupal avataruploader v7.x-1.0-beta8 - Cross Site Scripting XSS Date: 2022-03-22 Author: Milad karimi Software Link: https://www.drupal.org/project/avataruploader Version: v7.x-1.0-beta8 Tested on: Windows 10 CVE: N/A 1. Description: This plugin creates a avataruploader from any po...
GHSA-H3Q4-VMW4-CPR5 Path Traversal in Gitea
The avatar middleware in Gitea before 1.13.6 allows Directory Traversal via a crafted URL...
Path Traversal in Gitea
The avatar middleware in Gitea before 1.13.6 allows Directory Traversal via a crafted URL...
Gitea Directory Traversal Vulnerability
Gitea is an open source community-driven clone of Gogs, a popular Git self-hosted service. A directory traversal vulnerability exists on Gitea that can be exploited by an attacker to allow the avatar middleware in Gitea to allow directory traversal via a crafted URL...