File Upload Vulnerability in HYBBS Plugin Page

HYBBS is a lightweight community forum program. A file upload vulnerability exists in the HYBBS plugin page, which can be exploited by an attacker to gain control of the web server...

File Upload Vulnerability in Campus Flat Fee System

Tianjin Shenzhou Haotian Technology Co., Ltd. is a high-tech enterprise integrating management software design, development, sales and service. A file upload vulnerability exists in the Campus Unified Charging System, which can be exploited by attackers to gain control of the web server...

File Upload Vulnerability in Geek-Framework

Geek-Framework is built on the basis of SpringBoot, a Java foundation development framework . Geek-Framework has a file upload vulnerability that can be exploited by an attacker to gain control of a web server...

File Upload, Unauthorized Access Vulnerabilities in Beijing Jinfang Times Technology Co.

Beijing Jinfang Times Technology Co., Ltd. is a company that provides website construction services for enterprises, institutions and government agencies. There are file upload and unauthorized access vulnerabilities in the website building system of Beijing Jinfang Times Technology Co. Ltd, whic...

DoorGets Arbitrary File Upload Vulnerability

DoorGets is a free and open source content management system. An arbitrary file upload vulnerability exists in /fileman/php/upload.php in doorGets 7.0. A remote, ordinary registered user can exploit this vulnerability to upload a backdoor file to take control of the server...

File Upload Vulnerability in niushop Multi-Merchant Basic v1.11

NiuShop B2B2C Multi-Merchant Mall System is a PHP open source e-commerce system designed and developed completely independently by Shanxi NiuKu Information Technology Co. NiuShop B2B2C Multi-merchant Mall System Up.php file file upload vulnerability. An attacker can upload arbitrary files and...

CVE-2019-11615

/fileman/php/upload.php in doorGets 7.0 has an arbitrary file upload vulnerability. A remote normal registered user can use this vulnerability to upload backdoor files to control the server...

CVE-2019-11615

/fileman/php/upload.php in doorGets 7.0 has an arbitrary file upload vulnerability. A remote normal registered user can use this vulnerability to upload backdoor files to control the server...

File upload vulnerability in Acme cms ad***.php

Acme CMS is a full-featured, PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction CMS building system. Aike CMS ad.php file upload vulnerability, attackers can use the vulnerability to upload arbitrary files, to obtain control of the server...

File upload vulnerability in Acme cms po***.php

Acme CMS is a full-featured, PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction CMS building system. Aike CMS po.php file upload vulnerability, attackers can use the vulnerability to upload any file, to obtain control of the server...

CVE-2019-11615: Unrestricted Upload of File with Dangerous Type

/fileman/php/upload.php in doorGets 7.0 has an arbitrary file upload vulnerability. A remote normal registered user can use this vulnerability to upload backdoor files to control the server...

PHPCMS has a file upload vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. A file upload vulnerability exists in PHPCMS, which can be exploited by attackers to gain control of a web server...

Arbitrary Code Execution Vulnerability in CRMEB Backend

CRMEB system is a set of customer relationship management + marketing e-commerce system, can really help enterprises based on WeChat public number, small program, to realize the member relationship management, data analysis, accurate marketing e-commerce management system. CRMEB backend exists...

File upload vulnerability in QCMS web management system ca***.php

QCMS website management system is a PHP lightweight system developed through MVC architecture. A file upload vulnerability exists in the QCMS website management system ca.php, which can be exploited by an attacker to gain control of the web server...

Code execution vulnerability in HadSky Light Forum system (CNVD-2019-14572)

HadSky Light Forum System is a free and open forum system for individual users. A code execution vulnerability exists in the HadSky Light Forum System, which can be exploited by an attacker to gain control of the web server...

File upload vulnerability in QCMS website management system ca***.php (CNVD-2019-13600)

QCMS website management system is a PHP lightweight system developed through MVC architecture. A file upload vulnerability exists in the QCMS web management system ca.php, which can be exploited by an attacker to gain control of the web server...

File upload vulnerability in PHPOK pl***.php

PHPOK is a set of enterprise station CMS system developed in PHP + MYSQL language. A file upload vulnerability exists in PHPOK pl.php, which can be exploited by attackers to gain control of a web server...

File upload vulnerability in PHPOK ap***.php

PHPOK is a set of enterprise station CMS system developed in PHP + MYSQL language. A file upload vulnerability exists in PHPOK ap.php, which can be exploited by attackers to gain control of the web server...

DirectAdmin 1.561 Cross Site Scripting

Title: DirectAdmin Multiple Vulnerabilities to Takeover the Server = v1.561 Date: 12.04.2019 Author: Numan OZDEMIR Vendor Homepage: https://www.directadmin.com/ Version: Up to v1.561. CVE: CVE-2019-11193 [email protected] && [email protected] Detailed:...

CVE-2019-10845

An issue was discovered in Uniqkey Password Manager 1.14. When entering new credentials to a site that isn't registered within this product, a pop-up window will appear asking the user if they want to save these new credentials. The code of the pop-up window can be read and, to some extent,...