Veritas Technologies Infoscale Operations Manager 代码问题漏洞

Veritas Technologies Infoscale Operations Manager is a suite of software from Veritas Technologies, Inc. that is used to manage the entire InfoScale deployment. The software provides multi-cluster management, customized interfaces and centralized audit logging. A security vulnerability exists in...

Architect HTML And Site Builder 2.2.3 File Upload

==================================================================================================================================== | Title : Architect - HTML and Site Builder V 2.2.3 Remote File Upload vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser :...

Design/Logic Flaw

A vulnerability was found in SmartWeb Infotech Job Board 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /settings/account of the component My Profile Page. The manipulation of the argument filename leads to unrestricted upload. The attack may be...

SEMCMS 代码问题漏洞

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. A code issue vulnerability exists in SEMCMS PHP version 3.7, which can be exploited by remote attackers to upload arbitrary files and gain escalated privileges...

PT-2023-11503 · Unknown · Semcms Php

Name of the Vulnerable Software and Affected Versions: SEMCMS PHP version 3.7 Description: The issue allows remote attackers to upload arbitrary files and gain escalated privileges. Recommendations: For SEMCMS PHP version 3.7, update to a version that fixes the file upload issue to prevent remote...

The vulnerability in the J-Web web interface of Juniper Networks’ Junos operating system, which allows a hacker to upload arbitrary files.

The vulnerability of the J-Web web interface of Juniper Networks’ Junos operating system relates to the exploitation of a relative path. Exploiting this vulnerability allows a malicious actor to upload arbitrary files remotely...

Out-of-bounds

A vulnerability, which was classified as critical, has been found in PHPGurukul Teachers Record Management System 1.0. Affected by this issue is some unknown functionality of the file /changeimage.php of the component Profile Picture Handler. The manipulation of the argument newpic leads to...

CVE-2023-2888

PHPOK 6.4.100 is affected by an unrestricted arbitrary file upload vulnerability in admin.php?c=upload&f=zip&_noCache=... remote; impact includes potential code execution via uploaded files. No patch/version fix details are provided in the connected documents; remediation status is unspecified. I...

CVE-2023-30247

File Upload vulnerability found in Oretnom23 Storage Unit Rental Management System v.1.0 allows a remote attacker to execute arbitrary code via the updatesettings parameter...

CVE-2023-1942

CVE-2023-1942 affects SourceCodester Online Computer and Laptop Store 1.0. The Avatar Handler’s /admin/?page=user functionality is vulnerable to unrestricted file uploads, enabling remote exploitation. Documents indicate an attacker can upload arbitrary files to execute code, with the vulnerabili...

The vulnerability of Mozilla Firefox’s Intent mechanism on Android operating systems allows attackers to upload arbitrary files.

The vulnerability of Mozilla Firefox’s Intent mechanism on Android operating systems is related to the absence of request execution when opening external applications. Exploiting this vulnerability allows a remote attacker to upload arbitrary files...

CVE-2023-1797

Summary: OTCMS 6.0.1 contains a critical vulnerability in the sysCheckFile.php?mudi=sql functionality that allows unrestricted file uploads. The root cause is an absence of upload restrictions in that function, enabling a remote attacker to upload arbitrary files and potentially execute code. The...

CVE-2023-1433

CVE-2023-1433 affects SourceCodester Gadget Works Online Ordering System 1.0. The vulnerability resides in the admin/products/controller.php?action=add endpoint of the Products Handler, where manipulation of the filename argument enables unrestricted file upload. This can be triggered remotely an...

CVE-2023-1391

SourceCodester Online Tours & Travels Management System 1.0 contains a vulnerability in admin/ab.php where manipulation of the img argument allows unrestricted remote file upload. The issue is publicly disclosed (VDB-222978) and affects remote exploitability. Multiple connected sources corroborat...

CVE-2023-1328

CVE-2023-1328 concerns Guizhou 115cms 4.2 where a vulnerability in the file /admin/content/index (and related index.html) allows unrestricted file upload. The issue is described as exploitable remotely, with the exploit having been disclosed publicly. Multiple connected sources (e.g., PRION/PT-Se...

CVE-2023-22336

Path traversal vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to upload a specially crafted file to an arbitrary directory. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22344 vulnerabilitie...

SUSE CVE-2018-11091

An issue was discovered in MyBiz MyProcureNet 5.0.0. A malicious file can be uploaded to the webserver by an attacker. It is possible for an attacker to upload a script to issue operating system commands. This vulnerability occurs because an attacker is able to adjust the...

CVE-2023-20073

A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insufficient authorization enforcement...

PT-2022-6295 · Unknown · Apex-Vuz Automation System

Name of the Vulnerable Software and Affected Versions: Apex-VUZ automation system affected versions not specified Description: The issue is related to the messaging component of the custom file upload module in the Apex-VUZ automation system. It involves the unrestricted upload of dangerous file...

PT-2022-6232 · Apple +1 · Mdnsresponder.Exe +1

Name of the Vulnerable Software and Affected Versions: mDNSResponder.exe affected versions not specified Audinate Dante Application Library version le1.2.0 Description: The issue is related to a DLL Sideloading attack, where the executable improperly specifies how to load the DLL, from which fold...