CVE-2026-127283 SourceCodester Food Ordering System Admin Image update_food.php unrestricted upload

A vulnerability was identified in SourceCodester Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file admin/updatefood.php of the component Admin Image Handler. Such manipulation of the argument cmd leads to unrestricted upload. The attack may be performed fr...

CVE-2026-127283

A vulnerability exists in the SourceCodester Food Ordering System 1.0 within the Admin Image Handler component. Specifically, an unknown functionality in the file admin/update_food.php allows for unrestricted upload when the cmd argument is manipulated. This attack can be performed remotely . The...

EUVD-2026-124818

A vulnerability was identified in SourceCodester Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file admin/updatefood.php of the component Admin Image Handler. Such manipulation of the argument cmd leads to unrestricted upload. The attack may be performed fr...

PT-2026-146118

A vulnerability was identified in SourceCodester Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file admin/update food.php of the component Admin Image Handler. Such manipulation of the argument cmd leads to unrestricted upload. The attack may be performed...

YOOtheme Pro 5.0.52 Image Handler Shell Upload

YOOtheme Pro versions 5.0.0 through 5.0.52 contain an unauthenticated image-handler signature reuse and path traversal issue that can write a JPEG/PHP polyglot webshell and execute commands. https://packetstorm.news/download/238039...

Exploit for CVE-2026-102785

Check · Exploit · Detection · Impact · Write-up --- Discl...

Maian Pal 2.1 - Unrestricted File Upload in the Administration Product Image Han — Detect

Fingerprint / reachability check for Maian Pal 2.1 - Unrestricted File Upload in the Administration Product Image Handler CWE-434 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Maian Pal 2.1 - Unrestricted File Upload in the Administration Product Image Handler CWE-434""" from...

PT-2026-120748

Name of the Vulnerable Software and Affected Versions YOOtheme Pro versions prior to 5.0.53 Description An issue exists that allows an unauthenticated attacker to achieve remote code execution through the image handler. Recommendations Update to version 5.0.53...

CVE-2026-108567

A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function filesdeletefile of the file system/fields/image.php of the component Image Handler. Performing a manipulation of the argument size results in path traversal. The attack may be initiated remotely. The exploit has...

CVE-2026-108567

A path traversal vulnerability exists in InstantSoft icms2 (up to version 2.18.2) within the Image Handler component. Specifically, the files_delete_file function in the file system/fields/image.php file is susceptible to exploitation through manipulation of the argument size. This flaw can be tr...

CVE-2026-108567 InstantSoft icms2 Image image.php files_delete_file path traversal

A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function filesdeletefile of the file system/fields/image.php of the component Image Handler. Performing a manipulation of the argument size results in path traversal. The attack may be initiated remotely. The exploit has...

CVE-2026-108567

A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function filesdeletefile of the file system/fields/image.php of the component Image Handler. Performing a manipulation of the argument size results in path traversal. The attack may be initiated remotely. The exploit has...

CVE-2026-108567 InstantSoft icms2 Image image.php files_delete_file path traversal

A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function filesdeletefile of the file system/fields/image.php of the component Image Handler. Performing a manipulation of the argument size results in path traversal. The attack may be initiated remotely. The exploit has...

CVE-2026-108567 InstantSoft icms2 Image image.php files_delete_file path traversal

A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function filesdeletefile of the file system/fields/image.php of the component Image Handler. Performing a manipulation of the argument size results in path traversal. The attack may be initiated remotely. The exploit has...

EUVD-2026-96870

A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function filesdeletefile of the file system/fields/image.php of the component Image Handler. Performing a manipulation of the argument size results in path traversal. The attack may be initiated remotely. The exploit has...

CVE-2026-108567: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function filesdeletefile of the file system/fields/image.php of the component Image Handler. Performing a manipulation of the argument size results in path traversal. The attack may be initiated remotely. The exploit has...

PT-2026-110099

Name of the Vulnerable Software and Affected Versions InstantSoft icms2 versions prior to 2.18.3 Description A path traversal issue exists in the Image Handler component within the files delete file function of the system/fields/image.php file. A remote attacker can exploit this by manipulating t...

EUVD-2026-88510

A flaw has been found in FastStone Image Viewer up to 8.3. The affected element is an unknown function of the component TGA Image Handler. Executing a manipulation can lead to out-of-bounds write. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure b...

EUVD-2026-88557

A vulnerability was found in FastStone Image Viewer up to 8.3. This affects an unknown function of the file FSViewer.exe of the component TGA Image Handler. The manipulation results in out-of-bounds read. The attack can be launched remotely. The vendor was contacted early about this disclosure bu...

CVE-2026-101202

A flaw has been found in FastStone Image Viewer up to 8.3. The affected element is an unknown function of the component TGA Image Handler. Executing a manipulation can lead to out-of-bounds write. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure b...