CVE-2019-25295

The WP Cost Estimation plugin for WordPress is vulnerable to Upload Directory Traversal in versions before 9.660 via the uploadFormFiles function. This allows attackers to overwrite any file with a whitelisted type on an affected site...

CVE-2019-25295

The WP Cost Estimation plugin for WordPress is vulnerable to Upload Directory Traversal in versions before 9.660 via the uploadFormFiles function. This allows attackers to overwrite any file with a whitelisted type on an affected site...

CVE-2019-25295: Improper Limitation of a Pathname to a Restricted Directory

The WP Cost Estimation plugin for WordPress is vulnerable to Upload Directory Traversal in versions before 9.660 via the uploadFormFiles function. This allows attackers to overwrite any file with a whitelisted type on an affected site...

Directory Traversal

github.com/kataras/iris is vulnerable to directory traversal. A malicious user is able to write to arbitrary locations using UploadFormFiles method in context file due to improper parsing of file paths...

CVE-2021-23772

This affects all versions of package github.com/kataras/iris; all versions of package github.com/kataras/iris/v12. The unsafe handling of file names during upload using UploadFormFiles method may enable attackers to write to arbitrary locations outside the designated target folder...

PT-2021-15550

Name of the Vulnerable Software and Affected Versions: github.com/kataras/iris versions prior to a fixed version github.com/kataras/iris/v12 versions prior to a fixed version Description: The issue arises from the unsafe handling of file names during upload using the UploadFormFiles method, which...

CVE-2021-23772: Improper Link Resolution Before File Access

This affects all versions of package github.com/kataras/iris; all versions of package github.com/kataras/iris/v12. The unsafe handling of file names during upload using UploadFormFiles method may enable attackers to write to arbitrary locations outside the designated target folder...