6 matches found
CVE-2025-50857: Improper Limitation of a Pathname to a Restricted Directory
ZenTaoPMS v18.11 through v21.6.beta is vulnerable to Directory Traversal in /module/ai/control.php. This allows attackers to execute arbitrary code via a crafted file upload...
9.8CVSS6.6AI score0.02385EPSS
SaveExploits1References1
CVE-2025-67742: Improper Limitation of a Pathname to a Restricted Directory
In JetBrains TeamCity before 2025.11 path traversal was possible via file upload...
7.5CVSS5.8AI score0.00805EPSS
SaveExploits0References3
CVE-2014-3448: Unrestricted Upload of File with Dangerous Type
BSS Continuity CMS 4.2.22640.0 has a Remote Code Execution vulnerability due to unauthenticated file upload...
9.8CVSS8.2AI score0.03977EPSS
SaveExploits2References2
Coppermine < 1.4.20 'img_dir' Arbitrary File Upload
Binary data 4847.prm...
7.3AI score
SaveExploits0References1
20