CVE-2020-37054 Navigate CMS 2.8.7 - Cross-Site Request Forgery

Navigate CMS 2.8.7 contains a cross-site request forgery vulnerability that allows attackers to upload malicious extensions through a crafted HTML page. Attackers can trick authenticated administrators into executing arbitrary file uploads by leveraging the extension upload functionality without...

ImpressCMS 代码问题漏洞

ImpressCMS is a MySQL-based, modular content management system CMS from ImpressCMS. The system includes modules for press releases, forums and photo albums. A code issue vulnerability exists in ImpressCMS version 1.4.4, which stems from improperly cleaned file upload extensions, and could allow a...

CVE-2022-2356

The Frontend File Manager & Sharing WordPress plugin before 1.1.3 does not filter file extensions when letting users upload files on the server, which may lead to malicious code being uploaded...