CVE-2026-113393

A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 8218. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi of the component commonupload. Executing a manipulation of the argument uploadpath/uploadname can lead to unrestricted upload. The attack may...

CVE-2026-113393

The DrayTek Vigor2960 (version 1.5.1.6 Revision 8218 ) is vulnerable to an unrestricted upload vulnerability within the commonupload component, specifically affecting the /cgi-bin/mainfunction.cgi file. An attacker can manipulate the upload_path/upload_name argument to perform an unrestricted upl...

EUVD-2026-105001

A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 8218. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi of the component commonupload. Executing a manipulation of the argument uploadpath/uploadname can lead to unrestricted upload. The attack may...

CVE-2026-113393 DrayTek Vigor2960 commonupload mainfunction.cgi unrestricted upload

A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 8218. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi of the component commonupload. Executing a manipulation of the argument uploadpath/uploadname can lead to unrestricted upload. The attack may...

Unrestricted file upload

Unrestricted File Upload in JEECG v4.0 and earlier allows remote attackers to execute arbitrary code or gain privileges by uploading a crafted file to the component "jeecgFormDemoController.do?commonUpload"...

CVE-2020-23083: Unrestricted Upload of File with Dangerous Type

Unrestricted File Upload in JEECG v4.0 and earlier allows remote attackers to execute arbitrary code or gain privileges by uploading a crafted file to the component "jeecgFormDemoController.do?commonUpload"...

PT-2021-10836

Name of the Vulnerable Software and Affected Versions JEECG versions 4.0 and earlier Description The issue allows remote attackers to execute arbitrary code or gain privileges by uploading a crafted file to the "jeecgFormDemoController.do?commonUpload" component. Recommendations For JEECG version...

JEECG code issues and vulnerabilities

jeecg is a software application. An intelligent development platform based on a code generator. A file upload vulnerability exists in JEECG v4.0 and earlier versions, which stems from an unrestricted file upload that can be exploited by an attacker to execute arbitrary code or gain privileges by...