iocharger 安全漏洞

iocharger is an electric vehicle charging and smart energy management solution from Galaxy Zhangtan iocharger, a Chinese company. A security vulnerability exists in iocharger. An attacker exploiting this vulnerability could upload arbitrary files to /tmp/upload/ or /tmp/...

NUUO NVRmini Devices OS Command Injection Vulnerability

NUUO NVRmini devices contain an OS command injection vulnerability. This vulnerability allows remote command execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command...

GO-2022-0407 Listing of upload directory contents possible in github.com/ThomasLeister/prosody-filer

Listing of upload directory contents possible in github.com/ThomasLeister/prosody-filer...

Open WebUI 0.1.105 File Upload / Path Traversal Vulnerabilities

Title: Open WebUI Arbitrary File Upload + Path Traversal Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2024-006.txt 1. Vulnerability Details Affected Vendor: Open WebUI Affected Product: Open WebUI Affected Version: 0.1.105 Platform: Debian 12 CWE Classification: CWE-22:...

VulnCheck KEV: CVE-2017-18378

In NETGEAR ReadyNAS Surveillance before 1.4.3-17 x86 and before 1.1.4-7 ARM, $GET'uploaddir' is not escaped and is passed to system through $tmpuploaddir, leading to upgradehandle.php?cmd=writeuploaddir remote command execution...

CVE-2022-47186

There is an unrestricted upload of file vulnerability in Generex CS141 below 2.06 version. An attacker could upload and/or delete any type of file, without any format restriction and without any authentication, in the "upload" directory...

Generex CS141 Code Issue Vulnerability

The Generex CS141 is a series of Ethernet adapters from the German company Generex. A code issue exists in the Generex CS141 prior to version 2.06, which stems from an unrestricted file upload. The vulnerability can be exploited to upload or delete any type of file in the "upload" directory witho...

K14574: PHP vulnerability CVE-2012-1172

Security Advisory Description PHP has been cited with the following vulnerability, which may be locally exploitable on some F5 products: The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid open square bracket characters in name values, which makes it...

SUSE CVE-2004-1148

phpMyAdmin before 2.6.1, when configured with UploadDir functionality, allows remote attackers to read arbitrary files via the sqllocalfile parameter...

CVE-2022-39812

Italtel NetMatch-S CI 5.2.0-20211008 allows Absolute Path Traversal under NMSCI-WebGui/SaveFileUploader. An unauthenticated user can upload files to an arbitrary path. An attacker can change the uploadDir parameter in a POST request not possible using the GUI to an arbitrary directory. Because th...

Design/Logic Flaw

PrestaShop is an open-source e-commerce solution. Versions prior to 1.7.8.8 did not properly restrict host filesystem access for users. Users may have been able to view the contents of the upload directory without appropriate permissions. This issue has been addressed and users are advised to...

CVE-2022-46158 Potential Information exposure in the upload directory in PrestaShop

PrestaShop is an open-source e-commerce solution. Versions prior to 1.7.8.8 did not properly restrict host filesystem access for users. Users may have been able to view the contents of the upload directory without appropriate permissions. This issue has been addressed and users are advised to...

PrestaShop has potential Information exposure in the upload directory

Impact Potential Information exposure in the upload directory. Patches Patch in PrestaShop 1.7.8.8 References https://capec.mitre.org/data/definitions/87.html Thanks to DZPATROL...

GHSA-9QGP-9WWC-V29R PrestaShop has potential Information exposure in the upload directory

Impact Potential Information exposure in the upload directory. Patches Patch in PrestaShop 1.7.8.8 References https://capec.mitre.org/data/definitions/87.html Thanks to DZPATROL...

PT-2022-27775 · Unknown · Prestashop

Name of the Vulnerable Software and Affected Versions: PrestaShop versions prior to 1.7.8.8 Description: PrestaShop is an open-source e-commerce solution where versions prior to 1.7.8.8 did not properly restrict host filesystem access for users. This could allow users to view the contents of the...

Exploit for Unrestricted Upload of File with Dangerous Type in Formidable_Project Formidable

CVE-2022–29622: Invulnerability Analysis This codebase was...

CVE-2022-22914

An incorrect access control issue in the component FileManager of Ovidentia CMS 6.0 allows authenticated attackers to to view and download content in the upload directory via path traversal...

CVE-2022-22914

An incorrect access control issue in the component FileManager of Ovidentia CMS 6.0 allows authenticated attackers to to view and download content in the upload directory via path traversal...

CVE-2022-22914

An incorrect access control issue in the component FileManager of Ovidentia CMS 6.0 allows authenticated attackers to to view and download content in the upload directory via path traversal...

Ovidentia 路径遍历漏洞

Ovidentia is an open source content management system and collaboration platform based on PHP and MySQL from the French team CANTICO Cantico, which can be used for publishing and managing projects, publication and article management, schedule sharing, and more. A path traversal vulnerability exis...