Tianwen-ERP-Upload-PoC

Tianwen Property ERP — Unauthenticated File Upload CVE: P...

EUVD-2026-35842

OpenClinic GA 5.351.19 contains a reflected cross-site scripting vulnerability in the DICOM image upload handler that allows attackers to execute arbitrary JavaScript in a victim's browser by embedding malicious payloads in DICOM file metadata fields. Attackers can craft a DICOM file with...

Siemens SINEC INS 安全漏洞

Siemens SINEC INS is a software developed by Siemens, a German company, that provides central services for network infrastructure. Versions of Siemens SINEC INS prior to S1.0 SP2 Update 6 contained security vulnerabilities. These vulnerabilities stemmed from the GET /api/sftp/uploadFiles endpoint...

CVE-2026-46747: Path Traversal: '/dir/../filename'

A vulnerability has been identified in SINEC INS All versions V1.0 SP2 Update 6. The affected application does not properly sanitize path input in the GET /api/sftp/uploadFiles endpoint used for directory listing. This allows path traversal through crafted input, enabling access to unintended fil...

CVE-2026-46746: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been identified in SINEC INS All versions V1.0 SP2 Update 6. The application does not properly sanitize user input in the /api/sftp/uploadFiles endpoint, allowing the injection of shell command payloads via crafted directory names. These payloads are stored and executed when...

PT-2026-48279

Name of the Vulnerable Software and Affected Versions OpenClinic GA version 5.351.19 Description A reflected cross-site scripting issue exists in the DICOM image upload handler. Attackers can execute arbitrary JavaScript in a victim's browser by embedding malicious payloads in DICOM file metadata...

Forminator Plugin Code Execution

The vulnerability of the entrydelete UploadFiles function in the Forminator plugin of the WordPress content management system is related to improper external manipulation of file names or file paths. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

com.carrotgarden.maven:bintray-maven-plugin (>=1.4.20190427204453, <=1.5.20191113165555), com.carrotgarden.maven:maven-plugin-tools-annotations (1.2.20190427171248) +6 more potentially affected by CVE-2023-37460 via org.codehaus.plexus:plexus-archiver (3.4.1)

org.codehaus.plexus:plexus-archiver MAVEN version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.carrotgarden.maven:bintray-maven-plugin =1.4.20190427204453, =0.1.1, =3.0.1, =3.1.5 -...

PT-2018-18157

Name of the Vulnerable Software and Affected Versions GLPI versions prior to 9.2.2 Description A remote code execution issue was discovered, allowing temporary access to an uploaded executable file due to a race condition. The application permits authenticated users to upload files when creating...

File Upload Vulnerability in the Latest Version of Zoomla!

Zoomla! Wave CMS is a CMS website core and management system R & D vendors, integrated content management, shopping malls, OA, SNS, project management, collection, e-mail subscription to hundreds of features , based on the . net platform and support cross-platform and mobile. Zoomla! CMS latest...

CVE-2014-2088

Unrestricted file upload vulnerability in ilias.php in ILIAS 4.4.1 allows remote authenticated users to execute arbitrary PHP code by using a .php filename in an uploadfiles action to the uploadFiles command, and then accessing the .php file via a direct request to a certain clientid pathname...

PT-2014-4476

Name of the Vulnerable Software and Affected Versions ILIAS version 4.4.1 Description The issue allows remote authenticated users to execute arbitrary PHP code. This is achieved by using a .php filename in an upload files action to the uploadFiles command and then accessing the .php file via a...

CVE-2014-2088: Undefined Security Weakness

Unrestricted file upload vulnerability in ilias.php in ILIAS 4.4.1 allows remote authenticated users to execute arbitrary PHP code by using a .php filename in an uploadfiles action to the uploadFiles command, and then accessing the .php file via a direct request to a certain clientid pathname...

CVE-2011-4166

Directory traversal vulnerability in the MPAUploader.Uploader.1.UploadFiles method in HP Managed Printing Administration before 2.6.4 allows remote attackers to create arbitrary files via crafted form data...

CVE-2011-4166: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the MPAUploader.Uploader.1.UploadFiles method in HP Managed Printing Administration before 2.6.4 allows remote attackers to create arbitrary files via crafted form data...

PT-2011-4872

Name of the Vulnerable Software and Affected Versions HP Managed Printing Administration versions prior to 2.6.4 Description A directory traversal issue exists in the MPAUploader.Uploader.1.UploadFiles method, allowing remote attackers to create arbitrary files by submitting crafted form data...