609 matches found
PT-2020-11978
Name of the Vulnerable Software and Affected Versions Responsive FileManager versions 9.13.4 through 9.14.0 Description The issue allows for Server-Side Request Forgery SSRF via the url parameter in the upload.php file. This is due to mishandled file-extension blocking and the possibility of a DN...
CVE-2011-4908: Unrestricted Upload of File with Dangerous Type
TinyBrowser plugin for Joomla! before 1.5.13 allows arbitrary file upload via upload.php...
PT-2020-7144
Name of the Vulnerable Software and Affected Versions TinyBrowser plugin for Joomla! versions prior to 1.5.13 Description The issue allows for arbitrary file upload via the upload.php file. This can potentially lead to unauthorized access and malicious activities on the affected system...
CVE-2013-0803: Unrestricted Upload of File with Dangerous Type
A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute arbitrary code...
PT-2020-7338
Name of the Vulnerable Software and Affected Versions: PolarBear CMS version 2.5 Description: A PHP file upload issue exists, which could allow a malicious user to execute arbitrary code via the upload.php endpoint. Recommendations: For PolarBear CMS version 2.5, consider restricting access to th...
CVE-2020-8811
ajax/profile-picture-upload.php in Bludit 3.10.0 allows authenticated users to change other users' profile pictures...
CVE-2020-8811: Missing Authorization
ajax/profile-picture-upload.php in Bludit 3.10.0 allows authenticated users to change other users' profile pictures...
PT-2020-20297
Name of the Vulnerable Software and Affected Versions Bludit version 3.10.0 Description The issue allows authenticated users to change other users' profile pictures due to a problem in the ajax/profile-picture-upload.php file. Recommendations For Bludit version 3.10.0, update to a newer version...
CVE-2011-2933
CVE-2011-2933: Affected software is WebsiteBaker 2.8.1 and earlier. The vulnerability is an Arbitrary File Upload in admin/media/upload.php caused by failure to restrict uploaded files with extensions .htaccess, .php4, .php5, and .phtl. Connected sources confirm this现. The provided documents do n...
CVE-2011-2933: Unrestricted Upload of File with Dangerous Type
An Arbitrary File Upload vulnerability exists in admin/media/upload.php in WebsiteBaker 2.8.1 and earlier due to a failure to restrict uploaded files with .htaccess, .php4, .php5, and .phtl extensions...
PT-2020-7112
Name of the Vulnerable Software and Affected Versions WebsiteBaker versions 2.8.1 and earlier Description An Arbitrary File Upload issue exists due to a failure to restrict uploaded files with certain extensions, such as .htaccess, .php4, .php5, and .phtl. This issue is related to the...
PT-2019-15881
Name of the Vulnerable Software and Affected Versions RESET.PRO Adobe Stock API integration version 4.8 for PrestaShop Description The issue allows remote attackers to execute arbitrary code by uploading a .php file through the 'reset/modules/advanced form maker edit/multiupload/upload.php'...
CVE-2019-19595: Unrestricted Upload of File with Dangerous Type
reset/modules/advancedformmakeredit/multiupload/upload.php in the RESET.PRO Adobe Stock API integration 4.8 for PrestaShop allows remote attackers to execute arbitrary code by uploading a .php file...
PT-2019-15880
Name of the Vulnerable Software and Affected Versions PrestaShop versions 1.6 and 1.7 Description The issue allows remote attackers to execute arbitrary code by uploading a .php file through the reset/modules/fotoliaFoto/multi upload.php endpoint in the RESET.PRO Adobe Stock API Integration...
CVE-2014-1214: Unrestricted Upload of File with Dangerous Type
views/upload.php in the ProJoom Smart Flash Header NovaSFH component 3.0.2 and earlier for Joomla! allows remote attackers to upload and execute arbitrary files via a crafted 1 dest parameter and 2 arbitrary extension in the Filename parameter...
CVE-2015-9471
CVE-2015-9471 affects the WordPress plugin dzs-zoomsounds (2.0), where an admin/upload.php arbitrary file upload vulnerability exists. The issue is tied to the dzs-zoomsounds WordPress plugin and results in potential unauthorized file uploads via its admin interface. The initial description state...
PT-2019-7430
Name of the Vulnerable Software and Affected Versions dzs-zoomsounds plugin versions through 2.0 for WordPress Description The issue concerns an arbitrary file upload in the admin/upload.php endpoint. This allows for potential malicious file uploads. Recommendations For versions through 2.0,...
CVE-2015-9471: Unrestricted Upload of File with Dangerous Type
The dzs-zoomsounds plugin through 2.0 for WordPress has admin/upload.php arbitrary file upload...
