24 matches found
CVE-2026-95693
In MISP, the EventReport::uploadPicture method in processed a caller-supplied tmpname field by invoking fileexists, mimecontenttype, and exifimagetype on the supplied path before verifying that the value was a genuine PHP upload via isuploadedfile. An authenticated user holding the permadd...
CVE-2026-95693
MISP 's EventReport::uploadPicture method processes a caller-supplied tmp_name field by calling file_exists(), mime_content_type(), and exif_imagetype() on the path before validating it with is_uploaded_file(). An authenticated user with the perm_add permission can supply an arbitrary filesystem ...
CVE-2026-95693 MISP Information Disclosure via Forged Upload Path
In MISP, the EventReport::uploadPicture method in processed a caller-supplied tmpname field by invoking fileexists, mimecontenttype, and exifimagetype on the supplied path before verifying that the value was a genuine PHP upload via isuploadedfile. An authenticated user holding the permadd...
CVE-2026-95693 MISP Information Disclosure via Forged Upload Path
In MISP, the EventReport::uploadPicture method in processed a caller-supplied tmpname field by invoking fileexists, mimecontenttype, and exifimagetype on the supplied path before verifying that the value was a genuine PHP upload via isuploadedfile. An authenticated user holding the permadd...
CVE-2026-95693 MISP Information Disclosure via Forged Upload Path
In MISP, the EventReport::uploadPicture method in processed a caller-supplied tmpname field by invoking fileexists, mimecontenttype, and exifimagetype on the supplied path before verifying that the value was a genuine PHP upload via isuploadedfile. An authenticated user holding the permadd...
EUVD-2026-84492
In MISP, the EventReport::uploadPicture method in processed a caller-supplied tmpname field by invoking fileexists, mimecontenttype, and exifimagetype on the supplied path before verifying that the value was a genuine PHP upload via isuploadedfile. An authenticated user holding the permadd...
PT-2026-96767
In MISP, the EventReport::uploadPicture method in processed a caller-supplied tmp name field by invoking file exists, mime content type, and exif imagetype on the supplied path before verifying that the value was a genuine PHP upload via is uploaded file. An authenticated user holding the perm ad...
CVE-2026-95693: Exposure of Sensitive Information to an Unauthorized Actor
In MISP, the EventReport::uploadPicture method in processed a caller-supplied tmpname field by invoking fileexists, mimecontenttype, and exifimagetype on the supplied path before verifying that the value was a genuine PHP upload via isuploadedfile. An authenticated user holding the permadd...
EUVD-2021-32696
Malicious code in bioql PyPI...
CVE-2025-4768: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as critical has been found in fenghaha/megagao ssm-erp and productionssm 1.0. This affects the function uploadPicture of the file PictureServiceImpl.java. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely...
CVE-2024-13210
A vulnerability was found in donglight bookstore电商书城系统说明 1.0. It has been declared as critical. Affected by this vulnerability is the function uploadPicture of the file src/main/java/org/zdd/bookstore/web/controller/admin/AdminBookController. java. The manipulation of the argument pictureFile lea...
CVE-2024-13210 donglight bookstore电商书城系统说明 AdminBookController. java uploadPicture unrestricted upload
A vulnerability was found in donglight bookstore电商书城系统说明 1.0. It has been declared as critical. Affected by this vulnerability is the function uploadPicture of the file src/main/java/org/zdd/bookstore/web/controller/admin/AdminBookController. java. The manipulation of the argument pictureFile lea...
CVE-2024-13210 donglight bookstore电商书城系统说明 AdminBookController. java uploadPicture unrestricted upload
A vulnerability was found in donglight bookstore电商书城系统说明 1.0. It has been declared as critical. Affected by this vulnerability is the function uploadPicture of the file src/main/java/org/zdd/bookstore/web/controller/admin/AdminBookController. java. The manipulation of the argument pictureFile lea...
PT-2025-2066
Name of the Vulnerable Software and Affected Versions donglight bookstore电商书城系统说明 version 1.0 Description A critical issue has been found in the uploadPicture function of the AdminBookController class, located in the file...
CVE-2024-13210: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in donglight bookstore电商书城系统说明 1.0. It has been declared as critical. Affected by this vulnerability is the function uploadPicture of the file src/main/java/org/zdd/bookstore/web/controller/admin/AdminBookController. java. The manipulation of the argument pictureFile lea...
CVE-2021-45990
Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function uploadPicture. This vulnerability allows attackers to execute arbitrary commands via the picname parameter...
CVE-2021-45990
Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function uploadPicture. This vulnerability allows attackers to execute arbitrary commands via the picname parameter...
CVE-2021-45990
Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function uploadPicture. This vulnerability allows attackers to execute arbitrary commands via the picname parameter...
Command injection
Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function uploadPicture. This vulnerability allows attackers to execute arbitrary commands via the picname parameter...
CVE-2021-45990
The CVE-2021-45990 entry concerns Tenda G1 and G3 routers (firmware version v15.11.0.17(9502)_CN ). A command injection vulnerability exists in the function uploadPicture , exploitable via the pic_name parameter to execute arbitrary commands. This is described in the NVD/CVE records with high/cri...