1612 matches found
CVE-2025-11941 e107 CMS Avatar image.php path traversal
A vulnerability was detected in e107 CMS up to 2.3.3. This impacts an unknown function of the file /e107admin/image.php?mode=main&action=avatar of the component Avatar Handler. Performing manipulation of the argument multiaction results in path traversal. It is possible to initiate the attack...
Toeverything AFFiNE 代码注入漏洞
Toeverything AFFiNE is a knowledge management software from Toeverything open source. AFFiNE 0.24.1 and earlier versions suffer from a code injection vulnerability that stems from an unknown code flaw in the Avatar Upload Image Endpoint component, which could lead to a cross-site scripting attack...
VaahCMS is vulnerable to XSS through its Avatar Upload endpoint
Cross-Site Scripting in vaahcms v.2.3.1 allows a remote attacker to execute arbitrary code via upload method in the storeAvatar method of UserBase.php...
GHSA-Q769-PHQG-263R VaahCMS is vulnerable to XSS through its Avatar Upload endpoint
Cross-Site Scripting in vaahcms v.2.3.1 allows a remote attacker to execute arbitrary code via upload method in the storeAvatar method of UserBase.php...
Exploit for CVE-2025-61183
CVE-2025-61183 Stored XSS in User Avatar Upload via Unsafe S...
CVE-2025-61183
VaahCMS 2.3.1 is affected by a Stored XSS via the Avatar Upload endpoint in storeAvatar() of UserBase.php. The vulnerability stems from saving the uploaded file to a public path before content/MIME-type validation, allowing an attacker to place a crafted SVG that can execute script when rendered....
CVE-2025-61183
Cross Site Scripting in vaahcms v.2.3.1 allows a remote attacker to execute arbitrary code via upload method in the storeAvatar method of UserBase.php...
EUVD-2007-1720
Malware in sbrugna...
EUVD-2005-0260
Malware in sbrugna...
EUVD-2020-23111
Malware in sbrugna...
EUVD-2016-2011
Malware in sbrugna...
EUVD-2021-23899
Malware in sbrugna...
EUVD-2021-11587
Malware in sbrugna...
EUVD-2021-21946
Malware in sbrugna...
EUVD-2020-13374
Malware in sbrugna...
EUVD-2004-1961
Malware in sbrugna...
EUVD-2009-1071
Malware in sbrugna...
EUVD-2007-3823
Malware in sbrugna...