CVE-2022-23375

WikiDocs version 0.1.18 has an authenticated remote code execution vulnerability. An attacker can upload a malicious file using the image upload form through index.php...

Remote code execution

WikiDocs version 0.1.18 has an authenticated remote code execution vulnerability. An attacker can upload a malicious file using the image upload form through index.php...

CVE-2022-23375

WikiDocs version 0.1.18 has an authenticated remote code execution vulnerability. An attacker can upload a malicious file using the image upload form through index.php...

CVE-2022-23375

WikiDocs version 0.1.18 has an authenticated remote code execution vulnerability. An attacker can upload a malicious file using the image upload form through index.php...

PT-2022-15959

Name of the Vulnerable Software and Affected Versions WikiDocs version 0.1.18 Description The issue allows for authenticated remote code execution. An attacker can exploit this by uploading a malicious file using the image upload form through the "index.php" endpoint. The image upload form is...

CVE-2022-23375: Unrestricted Upload of File with Dangerous Type

WikiDocs version 0.1.18 has an authenticated remote code execution vulnerability. An attacker can upload a malicious file using the image upload form through index.php...

PT-2020-13283

Name of the Vulnerable Software and Affected Versions ismartgate PRO version 1.5.9 Description The issue allows malicious file uploads through the form used for uploading images to garage doors, requiring the use of PNG magic bytes. Recommendations For ismartgate PRO version 1.5.9, consider...

PT-2019-9977

Name of the Vulnerable Software and Affected Versions Gurock TestRail version 5.6.0.3853 Description An issue exists in the image-upload form, available in the description editor, allowing remote authenticated users to execute arbitrary code by uploading an image file with an executable extension...

CVE-2018-20063: Unrestricted Upload of File with Dangerous Type

An issue was discovered in Gurock TestRail 5.6.0.3853. An "Unrestricted Upload of File" vulnerability exists in the image-upload form available in the description editor, allowing remote authenticated users to execute arbitrary code by uploading an image file with an executable extension but a sa...

CVE-2009-4824

Unspecified vulnerability in Kolab Webclient before 1.2.0 in Kolab Server before 2.2.3 allows attackers to have an unspecified impact via vectors related to an "image upload form."...

CVE-2009-4824

CVE-2009-4824 affects Kolab Webclient <= 1.1.x (before 1.2.0) and Kolab Server

CVE-2009-4824: Undefined Security Weakness

Unspecified vulnerability in Kolab Webclient before 1.2.0 in Kolab Server before 2.2.3 allows attackers to have an unspecified impact via vectors related to an "image upload form."...