CVE-2023-3796

A vulnerability, which was classified as problematic, has been found in Bug Finder Foody Friend 1.0. Affected by this issue is some unknown functionality of the file /user/profile of the component Profile Picture Handler. The manipulation of the argument profilepicture leads to unrestricted uploa...

CVE-2023-3796

A vulnerability, which was classified as problematic, has been found in Bug Finder Foody Friend 1.0. Affected by this issue is some unknown functionality of the file /user/profile of the component Profile Picture Handler. The manipulation of the argument profilepicture leads to unrestricted uploa...

CVE-2023-3796

CVE-2023-3796 affects Bug Finder Foody Friend 1.0, specifically the Profile Picture Handler’s /user/profile and the profile_picture parameter. The issue permits unrestricted file uploads via remote access, as described across multiple feeds (NVD, Red Hat, CVE records, and industry sources). The v...

PT-2023-26208 · Unknown · Bug Finder Foody Friend

Name of the Vulnerable Software and Affected Versions: Bug Finder Foody Friend version 1.0 Description: A problematic issue has been found in the Profile Picture Handler component, affecting some unknown functionality of the file /user/profile. The manipulation of the profile picture argument lea...

CVE-2023-3274

A vulnerability classified as critical has been found in code-projects Supplier Management System 1.0. Affected is an unknown function of the file btnfunctions.php of the component Picture Handler. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The...

Design/Logic Flaw

A vulnerability classified as critical has been found in code-projects Supplier Management System 1.0. Affected is an unknown function of the file btnfunctions.php of the component Picture Handler. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The...

CVE-2023-3274 code-projects Supplier Management System Picture btn_functions.php unrestricted upload

A vulnerability classified as critical has been found in code-projects Supplier Management System 1.0. Affected is an unknown function of the file btnfunctions.php of the component Picture Handler. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The...

CVE-2023-3274

CVE-2023-3274 affects code-projects Customer Supplier Management System v1.0, specifically the Picture Handler’s btn_functions.php. The vulnerability enables unrestricted file upload and can be exploited remotely; the exploit has been publicly disclosed (VDB-231624). Impact is described across so...

PT-2023-23987 · Code Projects · Supplier Management System

Name of the Vulnerable Software and Affected Versions: code-projects Supplier Management System version 1.0 Description: A critical issue has been found in the Picture Handler component of the Supplier Management System, affecting an unknown function of the file btn functions.php. This issue lead...

PT-2023-23498 · Unknown · Phpgurukul Teachers Record Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Teachers Record Management System version 1.0 Description: A critical issue has been found in the Profile Picture Handler component, specifically in the file /changeimage.php. The manipulation of the newpic argument leads to...

Cross site scripting

A vulnerability was found in EyouCms 1.5.4. It has been classified as problematic. Affected is an unknown function of the file login.php?m=admin&c=Arctype&a=edit of the component New Picture Handler. The manipulation of the argument litpicloca leads to cross site scripting. It is possible to laun...

PT-2023-17465 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: EyouCms version 1.5.4 Description: A problematic issue was found in the New Picture Handler component, specifically in the file login.php, where an unknown function is affected. The manipulation of the litpic loca argument leads to cross-site...