633 matches found
CVE-2021-43098
A File Upload vulnerability exists in bbs v5.3 via QuestionManageAction.java in a getType function...
CVE-2021-43099
An Archive Extraction AKA "Zip Slip vulnerability exists in bbs 5.3 in the UpgradeNow function in UpgradeManageAction.java, which unzips the arbitrary upladed zip file without checking filenames. The vulnerability is exploited using a specially crafted archive that holds directory traversal...
CVE-2021-43102
A File Upload vulnerability exists in bbs 5.3 is via HelpManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code...
CVE-2021-43100
A File Upload vulnerability exists in bbs 5.3 is via TopicManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code...
CVE-2021-43100
A File Upload vulnerability exists in bbs 5.3 is via TopicManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code...
Unrestricted file upload
A File Upload vulnerability exists in bbs 5.3 is via ForumManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code...
Sql injection
A Server-side Template Injection SSTI vulnerability exists in bbs 5.3 in TemplateManageAction.javawhich could let a malicoius user execute arbitrary code...
Unrestricted file upload
A File Upload vulnerability exists in bbs 5.3 is via TopicManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code...
Unrestricted file upload
A File Upload vulnerability exists in bbs 5.3 is via HelpManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code...
CVE-2021-43103
The CVE-2021-43103 entry concerns a File Upload vulnerability in the BBS 5.3 web forum software. The connected sources specify that the flaw exists in ForumManageAction.java in the GetType function, allowing a remote attacker to execute arbitrary code. Affected component: BBS 5.3; vulnerability t...
CVE-2021-43103
A File Upload vulnerability exists in bbs 5.3 is via ForumManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code...
CVE-2021-43102
A File Upload vulnerability exists in bbs 5.3 is via HelpManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code...
CVE-2021-43101
CVE-2021-43101 corresponds to a file upload vulnerability in bbs 5.3, exploitable via MembershipCardManageAction.java in GetType, enabling remote code execution. The connected sources corroborate a web forum software flaw permitting arbitrary code execution through unvalidated uploads. Affected c...
CVE-2021-43101
A File Upload vulnerability exists in bbs 5.3 is via MembershipCardManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code...
CVE-2021-43100
A File Upload vulnerability exists in bbs 5.3 is via TopicManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code...
CVE-2021-43100
CVE-2021-43100 affects bbs 5.3, where a File Upload vulnerability exists in TopicManageAction.java (GetType function). This allows a remote attacker to execute arbitrary code due to improper handling of uploaded content. The vulnerability is documented across multiple sources (NVD entry and corro...
CVE-2021-43099
CVE-2021-43099 is a Zip Slip-style vulnerability in the bbs 5.3 UpgradeNow function (UpgradeManageAction.java) that unzips uploaded archives without validating filenames, enabling directory traversal (e.g., ../../evil.exe). The CVE description and connected sources confirm the affected component ...
CVE-2021-43098
A File Upload vulnerability exists in bbs v5.3 via QuestionManageAction.java in a getType function...
CVE-2021-43098
CVE-2021-43098 describes a file upload vulnerability in the open-source forum software bbs v5.3 , originating from the QuestionManageAction.java file, within its getType function. The connected documents confirm the affected product and the exact location in code but do not provide concrete explo...