EUVD-2023-38905

Malicious code in bioql PyPI...

CVE-2023-34747

File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload...

CVE-2023-34865

Directory traversal vulnerability in ujcms 6.0.2 allows attackers to move files via the rename feature...

Unrestricted file upload

File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload...

Directory traversal

Directory traversal vulnerability in ujcms 6.0.2 allows attackers to move files via the rename feature...

CVE-2023-3231

A vulnerability has been found in UJCMS up to 6.0.2 and classified as problematic. This vulnerability affects unknown code of the component ZIP Package Handler. The manipulation of the argument dir leads to information disclosure. The attack can be initiated remotely. The complexity of an attack ...

CVE-2023-34865

Directory traversal vulnerability in ujcms 6.0.2 allows attackers to move files via the rename feature...

CVE-2023-34865

CVE-2023-34865 affects ujcms 6.0.2 with a directory traversal flaw that allows moving files via the rename feature. The issue is documented across multiple feeds; endpoints and/or components involved are the ujcms rename path and file moves. Impact is high (CVE/CVSS: Critical) per the primary ent...

CVE-2023-34747

File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload...