CVE-2023-7330 Ruijie Networks NBR Routers Unauthenticated Arbitrary File Upload via fileupload.php

Ruijie NBR series routers contain an unauthenticated arbitrary file upload vulnerability via /ddi/server/fileupload.php. The endpoint accepts attacker-supplied values in the name and uploadDir parameters and saves the provided multipart file content without adequate validation or sanitization of...

PT-2024-34503 · Avscms · Avscms

Name of the Vulnerable Software and Affected Versions: AVSCMS version 8.2.0 Description: The issue is related to an arbitrary file upload vulnerability in the /main/fileupload.php component. This allows attackers to execute arbitrary code by uploading a crafted file. Recommendations: For AVSCMS...