1613 matches found
CVE-2024-11971 Guizhou Xiaoma Technology jpress Avatar upload cross site scripting
A vulnerability classified as problematic was found in Guizhou Xiaoma Technology jpress 5.1.2. Affected by this vulnerability is an unknown functionality of the file /commons/attachment/upload of the component Avatar Handler. The manipulation of the argument files leads to cross site scripting. T...
PT-2024-17375 · Jpress · Jpress
Name of the Vulnerable Software and Affected Versions: jpress version 5.1.2 Description: A problematic issue was found in the Avatar Handler component, affecting an unknown functionality of the file /commons/attachment/upload. The manipulation of the files argument leads to cross-site scripting...
CVE-2024-9942
The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the MJgmgtuseravatarimageupload function in all versions up to, and including, 67.1.0. This makes it possible for unauthenticated attackers to upload...
WordPress plugin School Management System 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A code issue vulnerability exists in WordPress plugin...
PT-2024-39746 · WordPress · School Management System
Name of the Vulnerable Software and Affected Versions: School Management System for Wordpress plugin for WordPress versions up to, and including, 91.5.0 Description: The issue arises from missing file type validation in the mj smgt user avatar image upload function, allowing unauthenticated...
WordPress plugin WPGYM 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...
Exploit for CVE-2024-4439
CVE-2024-4439 CVE-2024-4439: Docker and POC Lab Setting...
CVE-2024-50649
The user avatar upload function in pythonbook V1.0 has an arbitrary file upload vulnerability...
CVE-2024-50649
The user avatar upload function in pythonbook V1.0 has an arbitrary file upload vulnerability...
CVE-2024-50652
A file upload vulnerability in javashop 1.0 allows attackers to upload arbitrary files by modifying the avatar function...
PT-2024-10982 · Chatwoot · Chatwoot
Name of the Vulnerable Software and Affected Versions: chatwoot/chatwoot versions prior to 2.5.0 Description: A Server-Side Request Forgery SSRF vulnerability was discovered, allowing an attacker to upload an SVG file containing a malicious SSRF payload. When the SVG file is used as an avatar and...
CVE-2024-50652
The CVE-2024-50652 entry concerns a file upload vulnerability in java_shop 1.0 that allows an attacker to upload arbitrary files by manipulating the avatar function. Multiple connected sources provide concrete details: the vulnerability affects java_shop 1.0 and enables arbitrary file upload, wit...
PT-2024-10981 · Chatwoot · Chatwoot
Name of the Vulnerable Software and Affected Versions: chatwoot/chatwoot versions prior to 2.6 Description: A stored cross-site scripting XSS vulnerability was discovered, affecting the profile settings when a user uploads an SVG file containing a malicious XSS payload. When the avatar is opened ...
CVE-2024-50649
The user avatar upload function in pythonbook V1.0 has an arbitrary file upload vulnerability...
PT-2024-34380 · Java Shop · Java Shop
Name of the Vulnerable Software and Affected Versions: java shop version 1.0 Description: A file upload issue allows attackers to upload arbitrary files by modifying the avatar function. This enables them to upload any file they want by changing the avatar function. Recommendations: For java shop...
CVE-2024-50652
A file upload vulnerability in javashop 1.0 allows attackers to upload arbitrary files by modifying the avatar function...
java_shop 安全漏洞
javashop is a Java-based mall website system designed and implemented by Tim Green, an individual developer. A security vulnerability exists in javashop version 1.0. An attacker can exploit the vulnerability to upload arbitrary files by modifying the avatar function...
python_book 安全漏洞
pythonbook is an online book lending website, book management system by Tim Green, an individual developer. A security vulnerability exists in pythonbook V1.0, which is caused by an arbitrary file upload vulnerability in the user avatar upload function...
PT-2024-34376 · Unknown · Python Book
Name of the Vulnerable Software and Affected Versions: python book version V1.0 Description: The issue concerns an arbitrary file upload vulnerability in the user avatar upload function. This vulnerability allows for the upload of arbitrary files, which could potentially lead to security issues...