5 matches found
EUVD-2016-10860
Snews CMS 1.7 contains an unrestricted file upload vulnerability that allows unauthenticated attackers to upload arbitrary files including PHP executables to the snewsfiles directory. Attackers can upload malicious PHP files through the multipart form-data upload endpoint and execute them by...
sNews 代码问题漏洞
sNews is a lightweight content management system developed by sNews CMS individuals, built using PHP. Version 1.7 of sNews has code vulnerabilities; these vulnerabilities stem from an unlimited file upload feature, which allows unauthenticated attackers to upload arbitrary files including PHP...
CVE-2021-35485
The Applications component of Nokia IMPACT (version through 19.11.2.10-20210118042150283 ) is vulnerable to an unrestricted file upload. An authenticated user can arbitrarily upload server-side executable files via the /ui/rest-proxy/application fileupload parameter. This vulnerability can be tri...
EUVD-2021-22127
The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload server-side executable files via the /ui/rest-proxy/application fileupload parameter. This can occur during the adding of a new application, or during the...
CVE-2021-35485
The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload server-side executable files via the /ui/rest-proxy/application fileupload parameter. This can occur during the adding of a new application, or during the...