24 matches found
CVE-2026-70376
CVE-2026-70376 — CSRF a livello di sito in Pluck CMS → RCE Controllo Referer fail-open + assenza di token CSRF + upload a doppia estensione Una singola visita di una pagina da parte di un admin elimina contenuti, inietta pagine e rilascia una webshell A colpo d'occhio · Riepilogo · Causa principa...
CVE-2026-61457
The Grav API plugin getgrav/grav-plugin-api before 1.0.3 contains a file upload extension bypass in the API media controller. HandlesMediaUploads::validateFileExtension inspects only the final file extension via pathinfo$filename, PATHINFOEXTENSION, so a user with api.media.write permission can...
CVE-2020-37054
Navigate CMS 2.8.7 contains a cross-site request forgery vulnerability that allows attackers to upload malicious extensions through a crafted HTML page. Attackers can trick authenticated administrators into executing arbitrary file uploads by leveraging the extension upload functionality without...
CVE-2020-37054
Navigate CMS 2.8.7 contains a cross-site request forgery vulnerability that allows attackers to upload malicious extensions through a crafted HTML page. Attackers can trick authenticated administrators into executing arbitrary file uploads by leveraging the extension upload functionality without...
CVE-2020-37054
Navigate CMS 2.8.7 is affected by a cross-site request forgery vulnerability that lets attackers upload malicious extensions via a crafted HTML page. By abusing the extension upload functionality without additional validation, an authenticated administrator can be tricked into performing arbitrar...
PT-2026-5491
Name of the Vulnerable Software and Affected Versions Navigate CMS version 2.8.7 Description Navigate CMS 2.8.7 is susceptible to a cross-site request forgery condition. This allows attackers to upload malicious extensions through a specially crafted HTML page. An attacker can deceive authenticat...
CVE-2025-66022
FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to version 1.7.1, an extension execution path in Faction’s extension framework permits untrusted extension code to execute arbitrary system commands on the server when a lifecycle hook is invoked, resulting in remote cod...
CVE-2025-66022 FACTION Unauthenticated Custom Extension Upload leads to RCE
FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to version 1.7.1, an extension execution path in Faction’s extension framework permits untrusted extension code to execute arbitrary system commands on the server when a lifecycle hook is invoked, resulting in remote cod...
EUVD-2022-5664
Malicious code in bioql PyPI...
OpenCart Path Traversal
The "program extension upload" feature in OpenCart through 3.0.2.0 has a six-step process upload, install, unzip, move, xml, remove that allows attackers to execute arbitrary code if the remove step is skipped, because the attacker can discover a secret temporary directory name containing 10 rand...
PT-2022-15807
Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.6.0patch2 Description The issue allows an authenticated admin user to upload a malicious extension in the format of a ZIP file with a PHP file inside it. After uploading, the PHP file will be placed at...
WordPress plugin Download Manager 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue exists in WordPress plugin...
Navigate CMS 2.8.7 - Cross-Site Request Forgery (Add Admin)
Exploit Title: Navigate CMS 2.8.7 - Cross-Site Request Forgery Add Admin Date: 2020-06-04 Exploit Author: Gus Ralph Vendor Homepage: https://www.navigatecms.com/en/home Software Link: https://sourceforge.net/projects/navigatecms/files/releases/navigate-2.8.7r1401.zip/download Version: 2.8.7 Teste...
Navigate CMS 2.8.7 - Cross-Site Request Forgery (Add Admin) Vulnerability
Exploit for php platform in category web applications Exploit Title: Navigate CMS 2.8.7 - Cross-Site Request Forgery Add Admin Exploit Author: Gus Ralph Vendor Homepage: https://www.navigatecms.com/en/home Software Link:...
CVE-2019-16514
An issue was discovered in ConnectWise Control formerly known as ScreenConnect 19.3.25270.7185. The server allows remote code execution. Administrative users could upload an unsigned extension ZIP file containing executable code that is subsequently executed by the server...
Directory traversal
The "program extension upload" feature in OpenCart through 3.0.2.0 has a six-step process upload, install, unzip, move, xml, remove that allows attackers to execute arbitrary code if the remove step is skipped, because the attacker can discover a secret temporary directory name containing 10 rand...
CVE-2018-11494
The "program extension upload" feature in OpenCart through 3.0.2.0 has a six-step process upload, install, unzip, move, xml, remove that allows attackers to execute arbitrary code if the remove step is skipped, because the attacker can discover a secret temporary directory name containing 10 rand...
CVE-2018-11494
The "program extension upload" feature in OpenCart through 3.0.2.0 has a six-step process upload, install, unzip, move, xml, remove that allows attackers to execute arbitrary code if the remove step is skipped, because the attacker can discover a secret temporary directory name containing 10 rand...
CVE-2018-11494
The "program extension upload" feature in OpenCart through 3.0.2.0 has a six-step process upload, install, unzip, move, xml, remove that allows attackers to execute arbitrary code if the remove step is skipped, because the attacker can discover a secret temporary directory name containing 10 rand...
CVE-2018-11494: Improper Limitation of a Pathname to a Restricted Directory
The "program extension upload" feature in OpenCart through 3.0.2.0 has a six-step process upload, install, unzip, move, xml, remove that allows attackers to execute arbitrary code if the remove step is skipped, because the attacker can discover a secret temporary directory name containing 10 rand...