6 matches found
CVE-2025-50857: Improper Limitation of a Pathname to a Restricted Directory
ZenTaoPMS v18.11 through v21.6.beta is vulnerable to Directory Traversal in /module/ai/control.php. This allows attackers to execute arbitrary code via a crafted file upload...
9.8CVSS6.4AI score0.02334EPSS
SaveExploits0References1
CVE-2025-67742: Improper Limitation of a Pathname to a Restricted Directory
In JetBrains TeamCity before 2025.11 path traversal was possible via file upload...
7.5CVSS5.7AI score0.00805EPSS
SaveExploits0References1
CVE-2014-3448: Unrestricted Upload of File with Dangerous Type
BSS Continuity CMS 4.2.22640.0 has a Remote Code Execution vulnerability due to unauthenticated file upload...
9.8CVSS8.2AI score0.03977EPSS
SaveExploits2References2
Coppermine < 1.4.20 'img_dir' Arbitrary File Upload
Binary data 4847.prm...
7.3AI score
SaveExploits0References1
20