EUVD-2020-30835

QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated remote code execution vulnerability in the QH.aspx file that allows attackers to upload malicious ASPX scripts. Attackers can exploit the file upload functionality by using the 'remotePath' and 'fileToUpload' parameters to write a...

CVE-2020-22987

Cross-Site Scripting XSS vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via the fileToUpload parameter to the uploadFile task...

PT-2022-8655

Name of the Vulnerable Software and Affected Versions MicroStrategy Web SDK versions 10.11 and earlier Description The issue allows remote unauthenticated attackers to execute arbitrary code. This is achieved via the fileToUpload parameter to the uploadFile task. Recommendations For MicroStrategy...