CVE-2024-52958

The CVE-2024-52958 entry concerns iota C.ai Conversational Platform (versions 1.0.0–2.1.3) with an issue in plugin management: improper verification of cryptographic signatures. This vulnerability enables remote authenticated users to load a malicious DLL via the plugin upload function. The CVSS-...

CVE-2024-11138

A vulnerability classified as problematic has been found in DedeCMS 5.7.116. This affects an unknown part of the file /dede/uploads/dede/friendlinkadd.php. The manipulation of the argument logoimg leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been...

PT-2024-16527 · Unknown · Codezips Online Institute Management System

Name of the Vulnerable Software and Affected Versions: Codezips Online Institute Management System versions up to 1.0 Description: A critical vulnerability was found in the Codezips Online Institute Management System. This issue affects unknown code of the file /profile.php. The manipulation of t...

SAS Studio 安全漏洞

SAS Studio is a Web browser-based programming environment from SAS. A security vulnerability exists in SAS Studio version 9.4 that originates from allowing a remote attacker to upload malicious files...

CVE-2024-10120

A vulnerability has been found in wfh45678 Radar up to 1.0.8 and classified as critical. This vulnerability affects unknown code of the file /services/v1/common/upload. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

CVE-2024-9855

A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM 1.3.8. It has been declared as critical. Affected by this vulnerability is the function uploadFile of the file /admin/SysModule/upload/ajaxmodel/upload/uploadfilepath/sysmodule1 of the component Module Plug-In Handler. The manipulation...

CVE-2024-9816

A vulnerability was found in Codezips Tourist Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/change-image.php. The manipulation of the argument packageimage leads to unrestricted upload. The attack may be launched remotely...

CVE-2024-9815

A vulnerability has been found in Codezips Tourist Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/create-package.php. The manipulation of the argument packageimage leads to unrestricted upload. The attack can be...

CVE-2024-9816

Codezips Tourist Management System 1.0 contains a vulnerability in /admin/change-image.php where the packageimage parameter allows unrestricted file upload. Exploitation is remotely possible and the exploit has been disclosed publicly. The issue is documented across CVE-2024-9816 entries (NVD/Red...

PT-2024-39536 · Unknown · Huankemao Scrm

Name of the Vulnerable Software and Affected Versions: HuankeMao SCRM versions up to 0.0.3 Description: A critical issue has been found in the Administrator Backend component, specifically in the function upload domain verification file of the file WxkConfig.php. The manipulation of the argument...

CVE-2024-9036

CVE-2024-9036 affects itsourcecode Online Bookstore 1.0. The issue is a vulnerability in admin_add.php, where manipulation of the image parameter allows unrestricted file upload. This could enable remote exploitation; multiple sources note the exploit has been disclosed publicly. No remediation d...

Online Traffic Offense 1.0 CSRF / Arbitrary File Upload

============================================================================================================================================= | Title : Online Traffic Offense 1.0 Auth by Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0.3...

Water Billing Management System 1.0 Cross Site Request Forgery / File Upload

============================================================================================================================================= | Title : Water Billing Management System 1.0 CSRF Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0....

CVE-2024-8296

FeehiCMS up to version 2.1.1 is affected by a vulnerability in the insert function (/admin/index.php?r=user%2Fcreate) where manipulating User[avatar] enables unrestricted file upload. The issue can be triggered remotely and, per the sources, the exploit has been disclosed publicly. Vendor has rep...

CVE-2024-8294

A vulnerability, which was classified as critical, was found in FeehiCMS up to 2.1.1. This affects the function update of the file /admin/index.php?r=friendly-link%2Fupdate. The manipulation of the argument FriendlyLinkimage leads to unrestricted upload. It is possible to initiate the attack...

CVE-2024-8166

A vulnerability has been found in Ruijie EG2000K 11.16B2 and classified as critical. This vulnerability affects unknown code of the file /tool/index.php?c=download&a=save. The manipulation of the argument content leads to unrestricted upload. The attack can be initiated remotely. The exploit has...

CVE-2024-8164

A vulnerability was determined in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. This affects the function rename of the file /Admin/Http/Controllers/FileManagerController.php. This manipulation of the argument newname causes unrestricted upload. The attack can be initiated remotely...

Medical Center Portal 1.0 Cross Site Request Forgery

============================================================================================================================================= | Title : Medical Center Portal 1.0 CSRF Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0.3 64 bits ...

CVE-2024-7943

A vulnerability was found in itsourcecode Laravel Property Management System 1.0 and classified as critical. This issue affects the function upload of the file PropertiesController.php. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The...

CVE-2024-7905

A vulnerability classified as critical has been found in DedeBIZ 6.3.0. This affects the function AdminUpload of the file admin/archivesdo.php. The manipulation of the argument litpic leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to t...