CVE-2019-25758

CVE-2019-25758 affects Joomla! component vBizz 1.0.7. The vulnerability is an unrestricted file upload in the profile_pic parameter, enabling authenticated attackers to upload arbitrary PHP files. By submitting malicious files via POST to the employee view endpoint, attackers can place PHP code i...

PHPGurukul Staff Leave Management System 代码注入漏洞

PHPGurukul Staff Leave Management System is an employee leave management system from PHPGurukul. A code injection vulnerability exists in version 1.0 of the PHPGurukul Staff Leave Management System, which stems from an incorrect manipulation of the parameter profilepic in the file...

CVE-2025-29017

A Remote Code Execution RCE vulnerability exists in Code Astro Internet Banking System 2.0.0 due to improper file upload validation in the profilepic parameter within pagesviewclient.php...