H3C Magic NX15: Path traversal vulnerability

H3C Magic NX15 V100R017 version has a path traversal vulnerability. This vulnerability stems from improper handling of the importprofile function’s parameter fileName in files/api/upload, which may lead to path traversal attacks. Attackers can launch attacks remotely...

XZJIE CMS code-related vulnerabilities

xzjie cms is xzjie individual developers of the cloud tower guest - cabin content publishing system. A code issue vulnerability exists in xzjie cms 1.0.3 and earlier versions, which stems from a problem with files/api/upload, where manipulation of the parameter uploadFile can lead to unrestricted...