CVE-2024-9975: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in SourceCodester Drag and Drop Image Upload 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /upload.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclos...

Sql injection

A vulnerability was found in Campcodes Video Sharing Website 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file upload.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed...

PT-2018-10198

Name of the Vulnerable Software and Affected Versions PrestaShop versions 1.4.0.1 through 1.6.1.18 Attribute Wizard addon version 1.6.9 Description The issue allows remote attackers to execute arbitrary code by uploading a .phtml file through the file upload.php in the Attribute Wizard addon...

CVE-2018-6944

core/lib/upload/um-file-upload.php in the UltimateMember plugin 2.0 for WordPress has a cross-site scripting vulnerability because it fails to properly sanitize user input passed to the $temp variable...

CVE-2018-6944

core/lib/upload/um-file-upload.php in the UltimateMember plugin 2.0 for WordPress has a cross-site scripting vulnerability because it fails to properly sanitize user input passed to the $temp variable...

PT-2018-17834

Name of the Vulnerable Software and Affected Versions UltimateMember plugin version 2.0 Description The issue arises from a cross-site scripting vulnerability in the core/lib/upload/um-file-upload.php file of the UltimateMember plugin. This vulnerability occurs because the plugin fails to properl...

CVE-2018-6944: Improper Neutralization of Input During Web Page Generation

core/lib/upload/um-file-upload.php in the UltimateMember plugin 2.0 for WordPress has a cross-site scripting vulnerability because it fails to properly sanitize user input passed to the $temp variable...

PT-2017-12336

Name of the Vulnerable Software and Affected Versions Synology Photo Station versions prior to 6.7.4-3433 Synology Photo Station versions prior to 6.3-2968 Description A server-side request forgery SSRF issue exists in the file upload.php file, allowing remote authenticated users to download...

WordPress DesignFolio+ Theme File Upload

Exploit Title: Wordpress Theme DesignFolio+ Arbitrary File Upload Vulnerability Google dork: inurl:wp-content/themes/DesignFolio-Plus Author: CrashBandicot Date: 04.03.2015 OSVDB-ID: 119623 Vendor HomePage: https://github.com/UpThemes/DesignFolio-Plus Software Link:...

PT-2010-5416

Name of the Vulnerable Software and Affected Versions Orbis CMS version 1.0.2 Description The issue allows remote authenticated users to execute arbitrary code by uploading a .php file to the fileman file upload.php script and then accessing it via a direct request to the file in the uploads...