EUVD-2022-31184

Malicious code in bioql PyPI...

CVE-2022-26630

Jellycms v3.8.1 and below was discovered to contain an arbitrary file upload vulnerability via \app.\admin\Controllers\db.php...

CVE-2022-26630

Jellycms v3.8.1 and below was discovered to contain an arbitrary file upload vulnerability via \app.\admin\Controllers\db.php...

CVE-2022-26630

Jellycms v3.8.1 and below was discovered to contain an arbitrary file upload vulnerability via \app.\admin\Controllers\db.php...

CVE-2022-26630

Jellycms v3.8.1 and below was discovered to contain an arbitrary file upload vulnerability via \app.\admin\Controllers\db.php...

Privilege escalation

Jellycms v3.8.1 and below was discovered to contain an arbitrary file upload vulnerability via \app.\admin\Controllers\db.php...

CVE-2022-26630

Jellycms v3.8.1 and below was discovered to contain an arbitrary file upload vulnerability via \app.\admin\Controllers\db.php...

CVE-2022-26630

Jellycms v3.8.1 and below was discovered to contain an arbitrary file upload vulnerability via \app.\admin\Controllers\db.php...

CVE-2022-26630

CVE-2022-26630 affects Jellycms v3.8.1 and earlier. Multiple connected sources confirm an arbitrary file upload vulnerability via the path app/admin/Controllers/db.php, impacting potentially file upload functions. Exploit specifics, affected products beyond JellyCMS, and remediation steps are not...

CVE-2022-26630: Unrestricted Upload of File with Dangerous Type

Jellycms v3.8.1 and below was discovered to contain an arbitrary file upload vulnerability via \app.\admin\Controllers\db.php...

PT-2022-17964

Name of the Vulnerable Software and Affected Versions Jellycms versions 3.8.1 and below Description The issue is related to an arbitrary file upload vulnerability. It can be exploited via the db.php file in the appadminControllers directory. Recommendations For Jellycms versions 3.8.1 and below, ...

JellyCMS 代码问题漏洞

JellyCMS is an enterprise website building management system. JellyCMS v3.8.1 and below has a security vulnerability that allows attackers to upload any file via app.adminControllersdb.php...