85 matches found
zlt-microservices-platform 安全漏洞
zlt-microservices-platform is a platform system for zlt individual developers. A security vulnerability exists in zlt-microservices-platform version 6.0.0 and earlier, which originates from the file zlt-business/file-center/src/main/java/com/central/file/controller/ The upload function in...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the GetFile function in the filecontroller.go. An attacker can access arbitrary files on the server by manipulating the fileName argument. Details A Directory Traversal attack also known as path traversal aims to...
ssm-erp 路径遍历漏洞
ssm-erp is a production management ERP system by fenghaha individual developer. A path traversal vulnerability exists in ssm-erp version 1.0, which stems from an incorrect operation of the file FileController.java that results in path traversal...
CVE-2025-2194
CVE-2025-2194 affects MRCMS 3.1.2: cross-site scripting in the FileController.list.do endpoint caused by manipulating the path parameter. Exploit disclosed; remote initiation possible. Mitigations from PT-2025-10751 include disabling the /admin/file/list.do function or restricting access, and avo...
CVE-2024-57451
ChestnutCMS =1.5.0 has a directory traversal vulnerability in contentcore.controller.FileControllergetFileList, which allows attackers to view any directory...
CVE-2024-57452
ChestnutCMS =1.5.0 has an arbitrary file deletion vulnerability in contentcore.controller.FileController, which allows attackers to delete any file and folder...
CVE-2025-0703
A vulnerability, which was classified as problematic, has been found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. This issue affects some unknown processing of the file src/main/java/io/github/controller/SysFileController.java. The manipulation of the argument name leads ...
CVE-2025-0702
A vulnerability classified as critical was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. This vulnerability affects unknown code of the file src/main/java/io/github/controller/SysFileController.java. The manipulation of the argument portraitFile leads to unrestricted...
PT-2025-2025 · Unknown · Mysiteforme
Name of the Vulnerable Software and Affected Versions: wangl1989 mysiteforme version 1.0 Description: A critical issue affects the doContent function of the file src/main/java/com/mysiteform/admin/controller/system/FileController. The manipulation of the content argument leads to server-side...
CVE-2024-9293
A vulnerability classified as critical was found in skyselang yylAdmin up to 3.0. Affected by this vulnerability is the function list of the file /app/admin/controller/file/File.php of the component Backend. The manipulation of the argument isdisable leads to sql injection. The attack can be...
PT-2024-20242 · Unknown · Novel-Plus
Name of the Vulnerable Software and Affected Versions: Novel-Plus versions 4.3.0-RC1 and prior Description: An arbitrary file upload issue exists, allowing an attacker to perform arbitrary file downloads by passing a specially crafted filename parameter. This issue is related to the upload functi...
CVE-2023-7037
A vulnerability was found in automad up to 1.10.9. It has been declared as critical. This vulnerability affects the function import of the file FileController.php. The manipulation of the argument importUrl leads to server-side request forgery. The attack can be initiated remotely. The exploit ha...
PT-2023-32845 · Automad · Automad
Name of the Vulnerable Software and Affected Versions: automad versions up to 1.10.9 Description: A critical issue affects the import function in the FileController.php file, where the manipulation of the importUrl argument leads to server-side request forgery. This can be initiated remotely and...
CVE-2023-42280
mee-admin 1.5 is vulnerable to Directory Traversal. The download method in the CommonFileController.java file does not verify the incoming data, resulting in arbitrary file reading...
HPESBHF04500 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-00828, 2023.3 IPU - Intel Processor Advisory, (GDS/Gather/Downfall), Local Disclosure of Information
Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1660 Storage - Prior to 1.8007-05-2023 U46 ROM Family, - Prior to 2.9007-20-2023 U30 ROM Family HPE StoreEasy 1560 Storage - Prior to 2.9007-20-2023 HPE...
CVE-2023-1349
A vulnerability, which was classified as problematic, has been found in Hsycms 3.1. Affected by this issue is some unknown functionality of the file controller\cate.php of the component Add Category Module. The manipulation of the argument title leads to cross site scripting. The attack may be...
PT-2022-23493 · Unknown · Kkfileview
Name of the Vulnerable Software and Affected Versions: kkFileView version 4.0.0 Description: The issue allows for arbitrary file deletion via the fileName parameter at the /controller/FileController.java endpoint. Recommendations: For kkFileView version 4.0.0, consider restricting access to the...
PT-2022-11757 · Unknown · Novel-Plus
Name of the Vulnerable Software and Affected Versions: novel-plus versions all Description: The issue concerns an unrestricted file upload in the /novel-admin/src/main/java/com/java2nb/common/controller/FileController.java file. This allows an attacker to upload malicious JSP files...
