Path Traversal in uploadAttachment

POC : see https://1drv.ms/v/s!Avwg5C1eKVA4gl3LF2hgRyVNrSqk?e=DHbHKF We also contact the Maintainer through email lujie.ac.cn...

Hangzhou Allview Software Co., Ltd. college security integrated platform upLoadAttachment.php page has file upload vulnerability

Hangzhou Allview Software Co., Ltd. is a multinational company specializing in fire safety management. A file upload vulnerability exists in the upLoadAttachment.php page of the university security integrated platform of Hangzhou Allview Software Co. It allows attackers to exploit the vulnerabili...

triangleortho.com XSS vulnerability

Vulnerable URL: https://www.triangleortho.com/submit/uploadAttachment.asp?attachID=1"...