7 matches found
EUVD-2024-26440
Malicious code in bioql PyPI...
CVE-2025-2687
CVE-2025-2687 affects PHPGurukul eLearning System 1.0. The vulnerable component is the Image Handler, specifically the file /user/index.php, where an unspecified function handling images allows an unrestricted upload. The vulnerability can be triggered remotely and exploitation has been publicly ...
CVE-2024-29434
An issue in the system image upload interface of Alldata v0.4.6 allows attackers to execute a directory traversal when uploading a file...
CVE-2024-29434
The Alldata software (version v0.4.6 ) contains a directory traversal vulnerability within its system image upload interface . An attacker can exploit this flaw during the file upload process to access or modify files outside the intended directory. This could lead to unauthorized data access or ...
CVE-2024-29434: Improper Limitation of a Pathname to a Restricted Directory
An issue in the system image upload interface of Alldata v0.4.6 allows attackers to execute a directory traversal when uploading a file...
PT-2024-22894 · Alldata · Alldata
Name of the Vulnerable Software and Affected Versions: Alldata version 0.4.6 Description: The issue in the system image upload interface allows attackers to execute a directory traversal when uploading a file. This enables them to access or modify files outside the intended directory, potentially...
