1883 matches found
CVE-2020-1895
A large heap overflow could occur in Instagram for Android when attempting to upload an image with specially crafted dimensions. This affects versions prior to 128.0.0.26.128...
Cross-Site Scripting (XSS)
Opencart is vulnerable to cross-site scripting XSS. The attack is possible because it does not sanitize the filename argument in the image upload section of admin panel, allowing an attacker to inject malicious script and get the script executed when a user visits the Image manager section...
OpenCart Cross-Site Scripting Vulnerability (CNVD-2020-18557)
OpenCart is a PHP-based open source online e-commerce solution. A cross-site scripting vulnerability exists in OpenCart 3.0.3.2. A remote authenticated user can exploit this vulnerability via a specially crafted filename in the user image upload section to conduct a cross-site scripting attack...
CVE-2020-10596
OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section...
CVE-2020-10596
OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section...
Design/Logic Flaw
OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section...
CVE-2020-10596
OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section...
PT-2020-12225 · Opencart · Opencart
Name of the Vulnerable Software and Affected Versions: OpenCart version 3.0.3.2 Description: The issue allows remote authenticated users to conduct cross-site scripting XSS attacks by uploading an image with a crafted filename in the users' image upload section. Recommendations: For OpenCart...
PHPKB Multi-Language 9 image-upload.php Code Execution
Exploit Title: PHPKB Multi-Language 9 - 'image-upload.php' Authenticated Remote Code Execution Google Dork: N/A Date: 2020-03-15 Exploit Author: Antonio Cannito Vendor Homepage: https://www.knowledgebase-script.com/ Software Link: https://www.knowledgebase-script.com/pricing.php Version:...
PHPKB Multi-Language 9 - 'image-upload.php' Authenticated Remote Code Execution
Exploit Title: PHPKB Multi-Language 9 - 'image-upload.php' Authenticated Remote Code Execution Google Dork: N/A Date: 2020-03-15 Exploit Author: Antonio Cannito Vendor Homepage: https://www.knowledgebase-script.com/ Software Link: https://www.knowledgebase-script.com/pricing.php Version:...
GHSA-G9RQ-X4FJ-F5HX Remote Code Execution Through Image Uploads in BookStack
Impact A user could upload PHP files through image upload functions, which would allow them to execute code on the host system remotely. They would then have the permissions of the PHP process. This most impacts scenarios where non-trusted users are given permission to upload images in any area o...
CVE-2020-10386
admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by uploading a .php file in the admin/js/ directory...
CVE-2020-10386
admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by uploading a .php file in the admin/js/ directory...
Remote Code Execution (RCE)
ssddanbrown/bookstack is vulnerable to remote code execution RCE. The attack exists because it allows untrusted users to upload PHP files to any area of applications by using image upload function and to execute the malicious PHP code on host system with PHP process permissions...
BookStack Remote Code Execution Vulnerability
BookStack is a platform for storing and organizing information and documents. A remote code execution vulnerability exists in versions of BookStack prior to 0.25.5. The vulnerability stems from a user being able to upload PHP files via the image upload feature. An attacker can exploit this...
CVE-2020-5256
BookStack before version 0.25.5 has a vulnerability where a user could upload PHP files through image upload functions, which would allow them to execute code on the host system remotely. They would then have the permissions of the PHP process. This most impacts scenarios where non-trusted users...
Information disclosure
BookStack before version 0.25.5 has a vulnerability where a user could upload PHP files through image upload functions, which would allow them to execute code on the host system remotely. They would then have the permissions of the PHP process. This most impacts scenarios where non-trusted users...
JetBrains Security Bulletin Q4 2019
FYI Security JetBrains Security Bulletin Q4 2019 Robert Demmer In the fourth quarter of 2019, we resolved a series of security issues in our products. Here’s a summary report that contains a description of each issue and the version in which it was resolved. Product | Description | Severity |...