22 matches found
CVE-2026-94045 newbee-ltd newbee-mall Goods Save Endpoint UploadController.java cross site scripting
A security flaw has been discovered in newbee-ltd newbee-mall up to 1.0.0. Impacted is an unknown function of the file controller/common/UploadController.java of the component Goods Save Endpoint. Performing a manipulation of the argument goodsName results in cross site scripting. The attack may ...
PT-2026-96002
Name of the Vulnerable Software and Affected Versions newbee-ltd newbee-mall versions prior to 1.0.1 Description A remote cross site scripting issue exists in the Goods Save Endpoint within the controller/common/UploadController.java file. By manipulating the goodsName argument, an attacker can...
CVE-2026-52475: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the UploadController.java file...
CVE-2026-52475
Cross Site Scripting vulnerability in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the UploadController.java file...
CVE-2025-15360: Unrestricted Upload of File with Dangerous Type
A vulnerability was determined in newbee-mall-plus 2.0.0. This impacts the function Upload of the file src/main/java/ltd/newbee/mall/controller/common/UploadController.java of the component Product Information Edit Page. This manipulation of the argument File causes unrestricted upload. The attac...
CVE-2025-8526
A vulnerability was found in Exrick xboot up to 3.3.4. It has been declared as critical. This vulnerability affects the function Upload of the file xboot-fast/src/main/java/cn/exrick/xboot/modules/base/controller/common/UploadController.java. The manipulation of the argument File leads to...
CVE-2025-8526: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in Exrick xboot up to 3.3.4. It has been declared as critical. This vulnerability affects the function Upload of the file xboot-fast/src/main/java/cn/exrick/xboot/modules/base/controller/common/UploadController.java. The manipulation of the argument File leads to...
CVE-2025-4259: Unrestricted Upload of File with Dangerous Type
A vulnerability has been found in newbee-mall 1.0 and classified as critical. Affected by this vulnerability is the function Upload of the file ltd/newbee/mall/controller/common/UploadController.java. The manipulation of the argument File leads to unrestricted upload. The attack can be launched...
CVE-2025-3807: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, was found in zhenfeng13 My-BBS 1.0. This affects the function Upload of the file src/main/java/com/my/bbs/controller/common/UploadController.java of the component Endpoint. The manipulation leads to unrestricted upload. It is possible to initiate...
CVE-2024-13191 ZeroWdd myblog uploadController.java upload unrestricted upload
A vulnerability, which was classified as critical, has been found in ZeroWdd myblog 1.0. This issue affects the function upload of the file src/main/java/com/wdd/myblog/controller/admin/uploadController.java. The manipulation of the argument file leads to unrestricted upload. The attack may be...
CVE-2024-13191
A vulnerability, which was classified as critical, has been found in ZeroWdd myblog 1.0. This issue affects the function upload of the file src/main/java/com/wdd/myblog/controller/admin/uploadController.java. The manipulation of the argument file leads to unrestricted upload. The attack may be...
CVE-2024-13191
CVE-2024-13191 affects ZeroWdd myblog 1.0, specifically the upload function in src/main/java/com/wdd/myblog/controller/admin/uploadController.java. The root cause is manipulation of the file argument, resulting in unrestricted uploads. The vulnerability is exploitable remotely and, per sources, t...
CVE-2024-13191: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, has been found in ZeroWdd myblog 1.0. This issue affects the function upload of the file src/main/java/com/wdd/myblog/controller/admin/uploadController.java. The manipulation of the argument file leads to unrestricted upload. The attack may be...
CVE-2024-13145 zhenfeng13 My-Blog uploadController. java upload unrestricted upload
A vulnerability classified as critical was found in zhenfeng13 My-Blog 1.0. Affected by this vulnerability is the function upload of the file src/main/java/com/site/blog/my/core/controller/admin/uploadController. java. The manipulation of the argument file leads to unrestricted upload. The attack...
CVE-2024-13145
CVE-2024-13145 affects zhenfeng13 My-Blog 1.0. The vulnerability lies in the upload function (src/main/java/com/site/blog/my/core/controller/admin/uploadController.java): manipulation of the file parameter leads to unrestricted file upload. This enables remote exploitation. Multiple connected sou...
CVE-2024-13145: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as critical was found in zhenfeng13 My-Blog 1.0. Affected by this vulnerability is the function upload of the file src/main/java/com/site/blog/my/core/controller/admin/uploadController. java. The manipulation of the argument file leads to unrestricted upload. The attack...
CVE-2024-13022: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, was found in taisan tarzan-cms 1.0.0. This affects the function UploadResponse of the file src/main/java/com/tarzan/cms/modules/admin/controller/common/UploadController.java of the component Article Management. The manipulation of the argument fi...
Timo Security Breach
Timo is a backend management system for auntvt individual developers. A security vulnerability exists in Timo version v.2.0.3, which originated from a vulnerability that allows remote attackers to execute arbitrary code via a file type restriction in the UploadController.java component...