Lucene search
+L

117 matches found

Cvelist
Cvelist
added 2022/11/09 12:0 a.m.31 views

CVE-2022-43277

Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via ip/youthappam/phpaction/editFile.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

7.5AI score0.0095EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2022/11/01 12:0 a.m.28 views

CVE-2022-43083

An arbitrary file upload vulnerability in admin-add-vehicle.php of Vehicle Booking System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

7.5AI score0.01056EPSS
SaveExploits1References1
Prion
Prion
added 2022/10/28 6:15 p.m.15 views

Design/Logic Flaw

Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /youthappam/managewebsite.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

5.8CVSS7.3AI score0.01091EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2022/10/28 2:15 p.m.5 views

CVE-2022-43275

Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /youthappam/phpaction/editProductImage.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

7.2CVSS6.1AI score0.0095EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2022/10/27 12:0 a.m.26 views

CVE-2022-39978

Online Pet Shop We App v1.0 was discovered to contain an arbitrary file upload vulnerability via the Editing function in the Product List module. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file uploaded through the picture upload point...

7.5AI score0.01056EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2022/10/18 12:0 a.m.11 views

CVE-2022-41504

An arbitrary file upload vulnerability in the component /phpaction/editProductImage.php of Billing System Project v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

7.2AI score0.01034EPSS
SaveExploits1References1
Prion
Prion
added 2022/10/17 2:15 p.m.22 views

Privilege escalation

An arbitrary file upload vulnerability in the component /apiadmin/upload/attach of 74cmsSE v3.13.0 allows attackers to execute arbitrary code via a crafted PHP file...

7.5CVSS9.5AI score0.00955EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/10/14 12:0 a.m.25 views

CVE-2022-41538

Wedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /Wedding-Management-PHP/admin/photosadd.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

9.1AI score0.00997EPSS
SaveExploits1References1
OSV
OSV
added 2022/09/22 10:15 p.m.5 views

CVE-2022-40089

A remote file inclusion RFI vulnerability in Simple College Website v1.0 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploitable when the directive allowurlinclude is set to On...

9.8CVSS6.1AI score0.02059EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2022/09/22 9:29 p.m.34 views

CVE-2022-40089

A remote file inclusion RFI vulnerability in Simple College Website v1.0 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploitable when the directive allowurlinclude is set to On...

9.7AI score0.02059EPSS
SaveExploits1References3
NVD
NVD
added 2022/09/16 7:15 p.m.17 views

CVE-2022-38621

Doufox v0.0.4 was discovered to contain a remote code execution RCE vulnerability via the edit file page. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS0.24058EPSS
SaveExploits1References1
OSV
OSV
added 2022/07/28 12:0 a.m.54 views

GHSA-JXG9-2CH7-F552 Feehi CMS arbitrary code execution via crafted PHP file

An arbitrary file upload vulnerability in the Advertising Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary code via a crafted PHP file...

8.8CVSS8.8AI score0.01186EPSS
SaveExploits1References3
Prion
Prion
added 2022/06/21 1:15 p.m.18 views

Privilege escalation

An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file...

7.5CVSS9.5AI score0.0241EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/06/21 1:0 p.m.28 views

CVE-2022-31374

An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file...

9.7AI score0.0241EPSS
SaveExploits1References1
NVD
NVD
added 2022/06/02 2:15 p.m.24 views

CVE-2022-29725

An arbitrary file upload in the image upload component of wityCMS v0.6.2 allows attackers to execute arbitrary code via a crafted PHP file...

8.8CVSS0.01356EPSS
SaveExploits1References1
NVD
NVD
added 2022/06/02 2:15 p.m.28 views

CVE-2022-29624

An arbitrary file upload vulnerability in the Add File function of TPCMS v3.2 allows attackers to execute arbitrary code via a crafted PHP file...

8.8CVSS0.01225EPSS
SaveExploits1References2
Prion
Prion
added 2022/06/02 2:15 p.m.16 views

Design/Logic Flaw

An arbitrary file upload vulnerability in the Add File function of TPCMS v3.2 allows attackers to execute arbitrary code via a crafted PHP file...

6.5CVSS8.8AI score0.01225EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/05/31 1:31 p.m.32 views

CVE-2022-29725

An arbitrary file upload in the image upload component of wityCMS v0.6.2 allows attackers to execute arbitrary code via a crafted PHP file...

9AI score0.01356EPSS
SaveExploits1References1
CVE
CVE
added 2022/05/25 12:50 p.m.120 views

CVE-2022-29651

The CVE-2022-29651 entry pertains to Online Food Ordering System v1.0, where an arbitrary file upload vulnerability in the Select Image feature can be exploited by uploading a crafted PHP file to achieve remote code execution. Available sources (NVD/NIST, Red Hat, CNVD, CVE listings) confirm the ...

7.2CVSS7.2AI score0.01466EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2022/05/11 1:15 p.m.6 views

CVE-2022-29655

An arbitrary file upload vulnerability in the Upload Photos module of Wedding Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

7.2CVSS7.3AI score
SaveExploits0References1
Rows per page
Query Builder