CVE-2026-112149

A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This impacts the function moveuploadedfile of the file home.php. The manipulation of the argument myimg leads to unrestricted upload. Remote exploitation of the attack is possible...

CVE-2026-112149 vraj404 Criminal-Management-System home.php move_uploaded_file unrestricted upload

A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This impacts the function moveuploadedfile of the file home.php. The manipulation of the argument myimg leads to unrestricted upload. Remote exploitation of the attack is possible...

EUVD-2026-104385

A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This impacts the function moveuploadedfile of the file home.php. The manipulation of the argument myimg leads to unrestricted upload. Remote exploitation of the attack is possible...

CVE-2026-112149

The vraj404 Criminal-Management-System (up to commit 2808d057e7ddc5295519a487365b0cacfd0ba8c4 ) contains an unrestricted file upload vulnerability within the home.php file. The flaw exists in the move_uploaded_file function, where manipulating the my_img argument allows for unauthorized file uplo...

CVE-2026-18143

CVE-2026-18143 — Request a Quote for WooCommerce Addify Arbitrary File Upload Python 3 PoC for CVE-2026-18143 in Request a Quote for WooCommerce woocommerce-request-a-quote, Addify / WooCommerce.com. Description PoCbit / GitHub CVE-2026-18143 — Request a Quote for WooCommerce ≤ 2.9.2 allows...

CVE-2026-108975

A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function moveuploadedfile of the file admin/addadmin.php. Performing a manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The...

CVE-2026-108973

A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function moveuploadedfile of the file /classes/Users.php?f=save. This manipulation of the argument img/id causes unrestricted upload. The attack can be initiated remotely. The exploit has be...

CVE-2026-108975 SourceCodester Library Management System add_admin.php move_uploaded_file unrestricted upload

A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function moveuploadedfile of the file admin/addadmin.php. Performing a manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The...

CVE-2026-108975

The SourceCodester Library Management System 1.0 contains a security flaw in the admin/add_admin.php file, specifically affecting the move_uploaded_file function. By manipulating the image argument, an attacker can achieve unrestricted upload of files. This vulnerability can be initiated remotely...

EUVD-2026-98315

A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function moveuploadedfile of the file admin/addadmin.php. Performing a manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The...

EUVD-2026-98313

A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function moveuploadedfile of the file /classes/Users.php?f=save. This manipulation of the argument img/id causes unrestricted upload. The attack can be initiated remotely. The exploit has be...

CVE-2026-108973 SourceCodester Contact Tracing System Users.php move_uploaded_file unrestricted upload

A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function moveuploadedfile of the file /classes/Users.php?f=save. This manipulation of the argument img/id causes unrestricted upload. The attack can be initiated remotely. The exploit has be...

CVE-2026-108975: Unrestricted Upload of File with Dangerous Type

A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function moveuploadedfile of the file admin/addadmin.php. Performing a manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The...

CVE-2026-108973: Unrestricted Upload of File with Dangerous Type

A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function moveuploadedfile of the file /classes/Users.php?f=save. This manipulation of the argument img/id causes unrestricted upload. The attack can be initiated remotely. The exploit has be...

CVE-2026-108801

A security flaw has been discovered in prasathmani TinyFileManager up to 2.6. The impacted element is the function moveuploadedfile of the file tinyfilemanager.php. Performing a manipulation of the argument fullpath results in unrestricted upload. The attack is possible to be carried out remotely...

EUVD-2026-97176

A security flaw has been discovered in prasathmani TinyFileManager up to 2.6. The impacted element is the function moveuploadedfile of the file tinyfilemanager.php. Performing a manipulation of the argument fullpath results in unrestricted upload. The attack is possible to be carried out remotely...

CVE-2026-108801 prasathmani TinyFileManager tinyfilemanager.php move_uploaded_file unrestricted upload

A security flaw has been discovered in prasathmani TinyFileManager up to 2.6. The impacted element is the function moveuploadedfile of the file tinyfilemanager.php. Performing a manipulation of the argument fullpath results in unrestricted upload. The attack is possible to be carried out remotely...

CVE-2026-108801

A security flaw exists in prasathmani TinyFileManager (versions up to 2.6) within the tinyfilemanager.php file. The vulnerability resides in the move_uploaded_file function, where manipulating the fullpath argument allows for unrestricted upload of files. This flaw can be exploited remotely . Whi...

CVE-2026-108801: Unrestricted Upload of File with Dangerous Type

A security flaw has been discovered in prasathmani TinyFileManager up to 2.6. The impacted element is the function moveuploadedfile of the file tinyfilemanager.php. Performing a manipulation of the argument fullpath results in unrestricted upload. The attack is possible to be carried out remotely...

CVE-2026-88396

ApiAdmin versions v5.0 and before are vulnerable to a Directory Traversal flaw in the admin file-upload endpoint (POST /admin/Index/upload ). The application fails to implement a whitelist, blacklist, or content check on uploaded files, accepting the provided file extension verbatim. Consequently...