CVE-2019-11615

/fileman/php/upload.php in doorGets 7.0 has an arbitrary file upload vulnerability. A remote normal registered user can use this vulnerability to upload backdoor files to control the server...

CVE-2006-1161: Undefined Security Weakness

Absolute path traversal vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote registered users to execute arbitrary code by uploading a malicious file to the Windows startup folder...