Lucene search
K

5 matches found

NVD
NVD
added 2025/10/28 3:15 a.m.4 views

CVE-2025-12347

A flaw has been found in MaxSite CMS up to 109. This issue affects some unknown processing of the file application/maxsite/admin/plugins/editorfiles/save-file-ajax.php. Executing manipulation of the argument filepath/content can lead to unrestricted upload. The attack can be executed remotely. Th...

8.8CVSS0.0005EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/28 2:2 a.m.2 views

EUVD-2025-36424

A flaw has been found in MaxSite CMS up to 109. This issue affects some unknown processing of the file application/maxsite/admin/plugins/editorfiles/save-file-ajax.php. Executing manipulation of the argument filepath/content can lead to unrestricted upload. The attack can be executed remotely. Th...

6.5CVSS6.1AI score0.0005EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/08/21 12:26 a.m.6 views

CVE-2024-44373

A Path Traversal vulnerability in AllSky v2023.05.01 through v2024.12.0606 allows an unauthenticated attacker to create a webshell and remote code execution via the path, content parameter to /includes/savefile.php...

9.8CVSS8.2AI score0.0157EPSS
Exploits0References1
OSV
OSV
added 2025/08/19 7:15 p.m.2 views

CVE-2024-44373

A Path Traversal vulnerability in AllSky v2023.05.01 through v2024.12.0606 allows an unauthenticated attacker to create a webshell and remote code execution via the path, content parameter to /includes/savefile.php...

9.8CVSS8.1AI score0.0157EPSS
Exploits0References4
NVD
NVD
added 2025/08/19 7:15 p.m.3 views

CVE-2024-44373

A Path Traversal vulnerability in AllSky v2023.05.01 through v2024.12.0606 allows an unauthenticated attacker to create a webshell and remote code execution via the path, content parameter to /includes/savefile.php...

9.8CVSS0.0157EPSS
Exploits0References4
Rows per page
Query Builder