8 matches found
CVE-2024-13191
CVE-2024-13191 affects ZeroWdd myblog 1.0, specifically the upload function in src/main/java/com/wdd/myblog/controller/admin/uploadController.java. The root cause is manipulation of the file argument, resulting in unrestricted uploads. The vulnerability is exploitable remotely and, per sources, t...
CVE-2024-13191 ZeroWdd myblog uploadController.java upload unrestricted upload
A vulnerability, which was classified as critical, has been found in ZeroWdd myblog 1.0. This issue affects the function upload of the file src/main/java/com/wdd/myblog/controller/admin/uploadController.java. The manipulation of the argument file leads to unrestricted upload. The attack may be...
CVE-2024-13145
CVE-2024-13145 affects zhenfeng13 My-Blog 1.0. The vulnerability lies in the upload function (src/main/java/com/site/blog/my/core/controller/admin/uploadController.java): manipulation of the file parameter leads to unrestricted file upload. This enables remote exploitation. Multiple connected sou...
CVE-2024-13145 zhenfeng13 My-Blog uploadController. java upload unrestricted upload
A vulnerability classified as critical was found in zhenfeng13 My-Blog 1.0. Affected by this vulnerability is the function upload of the file src/main/java/com/site/blog/my/core/controller/admin/uploadController. java. The manipulation of the argument file leads to unrestricted upload. The attack...
Timo Security Breach
Timo is a backend management system for auntvt individual developers. A security vulnerability exists in Timo version v.2.0.3, which originated from a vulnerability that allows remote attackers to execute arbitrary code via a file type restriction in the UploadController.java component...
CVE-2024-22824
An issue in Timo v.2.0.3 allows a remote attacker to execute arbitrary code via the filetype restrictions in the UploadController.java component...
CVE-2024-22824
An issue in Timo v.2.0.3 allows a remote attacker to execute arbitrary code via the filetype restrictions in the UploadController.java component...
CVE-2024-22824
CVE-2024-22824 affects Timo v2.0.3. The issue enables remote code execution via the filetype restrictions in UploadController.java, with CVSS 3.1 base score 9.8 (CRITICAL, NETWORK, HIGH impact on confidentiality, integrity, and availability). Red Hat and PRION/NVD/CNNVD entries corroborate the co...