6 matches found
CVE-2022-29632
An arbitrary file upload vulnerability in the component /course/api/upload/pic of Roncoo Education v9.0.0 allows attackers to execute arbitrary code via a crafted file...
Roncoo Education 代码问题漏洞
Roncoo Education is an online education platform from China-based Roncoo. A security vulnerability exists in Roncoo Education version v9.0.0, which stems from an arbitrary file upload issue in the /course/api/upload/pic component. An attacker can exploit the vulnerability to execute arbitrary cod...
PT-2022-19739
Name of the Vulnerable Software and Affected Versions Roncoo Education version 9.0.0 Description The issue is related to an arbitrary file upload vulnerability in the /course/api/upload/pic component, allowing attackers to execute arbitrary code via a crafted file. Recommendations For Roncoo...
CVE-2022-29632: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the component /course/api/upload/pic of Roncoo Education v9.0.0 allows attackers to execute arbitrary code via a crafted file...
PT-2020-15656
Name of the Vulnerable Software and Affected Versions Projects World Travel Management System version 1.0 Description The issue concerns Insecure File Permissions and Arbitrary File Upload in the upload pic function in updatesubcategory.php, allowing remote unauthenticated attackers to gain remot...