Unrestricted file upload

A file upload issue exists in all versions of ArticleCMS which allows malicious users to getshell...

CVE-2020-28063

A file upload issue exists in all versions of ArticleCMS which allows malicious users to getshell...

File Upload Vulnerability in Super cms v2.39 (CNVD-2021-32174)

Super CMS content management system by the SEO Research Center moonseo.cn in order to solve the problem of website optimization and research and development of a set of products, this product adopts an object-oriented approach to independent research and development of the MVC framework...

Uploading Enterprise App (Private App) to Google Play Store via Cloud Endpoint Management Fails - Error "Upload a new APK file with a different package name"

Uploading an APK file to Managed Google Play Store as instructed in Citrix Documentationyou receive the following error message: "Upload a new APK file with a different package name "...

File upload vulnerability in duxcms

duxcms is a web content management based on HMVC rules and developed in PHP for SMEs, companies, news, individuals and other related industries. A file upload vulnerability exists in duxcms, which can be exploited by attackers to obtain server administrative privileges...

CVE-2020-13774

CVE-2020-13774 – Ivanti Endpoint Manager is affected by an unrestricted file-upload flaw in EditLaunchPadDialog.aspx, impacting 2019.1 and 2020.1. The issue stems from insufficient file-extension validation and insecure file operations on uploaded images, allowing an authenticated attacker to upl...

CVE-2020-27386

An unrestricted file upload issue in FlexDotnetCMS before v1.5.9 allows an authenticated remote attacker to upload and execute arbitrary files by using the FileManager to upload malicious code e.g., ASP code in the form of a safe file type e.g., a TXT file, and then using the FileEditor in v1.5.8...

EUVD-2020-22065

An uncontrolled resource consumption vulnerability in Palo Alto Networks PAN-OS allows for a remote unauthenticated user to upload temporary files through the management web interface that are not properly deleted after the request is finished. It is possible for an attacker to disrupt the...

Design/Logic Flaw

An arbitrary file upload issue exists in Mara CMS 7.5. In order to exploit this, an attacker must have a valid authenticated admin/manager session and make a codebase/dir.php?type=filenew request to upload PHP code to codebase/handler.php...

PT-2020-13261 · Comodo +1 · Itop +1

Name of the Vulnerable Software and Affected Versions: Combodo iTop affected versions not specified Description: The issue is related to a stored Cross-site Scripting vulnerability. This can be exploited by uploading a file that contains a malicious script. Recommendations: At the moment, there i...

Description of the Office 2010 update: September 13, 2011

Description of the Office 2010 update: September 13, 2011 INTRODUCTION Microsoft has released an update for Microsoft Office 2010. This update provides the latest fixes for the 32-bit and the 64-bit editions of Office 2010. Additionally, this update contains stability and performance improvements...

Manolo GWTUpload Code Issue Vulnerability

Manolo GWTUpload is a library based on HTML and JavaScript , it is mainly used to upload files to a Web server . A security vulnerability exists in server/UploadServlet.java the servlet that handles file uploads in Manolo GWTUpload version 1.0.3. An attacker can exploit this vulnerability with th...

SUSE-SU-2020:0658-1 Security update for php5

This update for php5 fixes the following issues: - CVE-2020-7062: Fixed a null pointer dereference when using file upload functionality under specific circumstances bsc1165280. - CVE-2020-7063: Fixed an issue where adding files change the permissions to default bsc1165289...

Unrestricted file upload

A file upload issue exists in the specid parameter in Thomson Reuters FATCH before 5.2, which allows malicious users to upload arbitrary PHP files to the web root and execute system commands...

CVE-2015-4553

A file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell...

CVE-2015-5951

Thomson Reuters FATCA Arbitrary File Upload (CVE-2015-5951) is documented in multiple sources. Affected software: Thomson Reuters FATCA below version 5.2. The vulnerability arises from an arbitrary file upload via the specid parameter, enabling upload of PHP scripts to the web root and potential ...

Design/Logic Flaw

An issue was discovered in FileChucker 4.99e-free-e02. filechucker.cgi has a filter bypass that allows a malicious user to upload any type of file by using % characters within the extension, e.g., file.%ph%p becomes file.php...

USN-3627-1 apache2 vulnerabilities

Alex Nichols and Jakob Hirsch discovered that the Apache HTTP Server modauthnzldap module incorrectly handled missing charset encoding headers. A remote attacker could possibly use this issue to cause the server to crash, resulting in a denial of service. CVE-2017-15710 Elar Lang discovered that...

Unable to upload a file to an internal webpage using Secure Web

XenMobile 10.x Secure Web 10.x iOS 10.x User able to access the upload site, however, upload never completes successfully w/ no error or other notification. Behavior doesn't occur when attempting same on an Android device...

CVE-2017-6041

An Unrestricted Upload issue was discovered in Marel Food Processing Systems M3000 terminal associated with the following systems: A320, A325, A371, A520 Master, A520 Slave, A530, A542, A571, Check Bin Grader, FlowlineQC T376, IPM3 Dual Cam v132, IPM3 Dual Cam v139, IPM3 Single Cam v132, P520,...