CVE-2025-34046

An unauthenticated file upload vulnerability exists in the Fanwei E-Office = v9.4 web management interface. The vulnerability affects the /general/index/UploadFile.php endpoint, which improperly validates uploaded files when invoked with certain parameters uploadType=eofficelogo or...

Weaver E-Office 安全漏洞

Weaver E-Office is a collaborative office system from China's Panavision Technologies Weaver. A security vulnerability exists in Weaver E-Office v9.4 and prior versions, which originates from an unauthenticated file upload attack due to incorrect operation of the file /general/index/UploadFile.ph...

CVE-2024-28520

File Upload vulnerability in Byzoro Networks Smart multi-service security gateway intelligent management platform version S210, allows an attacker to obtain sensitive information via the uploadfile.php component...

CVE-2024-28520

File Upload vulnerability in Byzoro Networks Smart multi-service security gateway intelligent management platform version S210, allows an attacker to obtain sensitive information via the uploadfile.php component...

PT-2024-22451 · Byzoro Networks · Byzoro Networks Smart Multi-Service Security Gateway Intelligent Management Platform

Name of the Vulnerable Software and Affected Versions: Byzoro Networks Smart multi-service security gateway intelligent management platform version S210 Description: The issue allows an attacker to obtain sensitive information via the uploadfile.php component. This is a result of a File Upload...

CVE-2024-28520

CVE-2024-28520 is a file upload vulnerability in Byzoro Networks’ Smart multi-service security gateway intelligent management platform, version S210. The issue stems from the uploadfile.php component, enabling an attacker to obtain sensitive information. The vulnerability has a CVSSv3.1 vector of...

CVE-2024-0939 Byzoro Smart S210 Management Platform uploadfile.php unrestricted upload

A vulnerability has been found in Byzoro Smart S210 Management Platform up to 20240117 and classified as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument fileupload leads to unrestricted upload. The attack can be initiated...

CVE-2023-6576 Byzoro S210 HTTP POST Request uploadfile.php unrestricted upload

A vulnerability was found in Byzoro S210 up to 20231123. It has been declared as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php of the component HTTP POST Request Handler. The manipulation of the argument fileupload leads to unrestricted upload. The attack can ...

CVE-2023-5489 Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform uploadfile.php unrestricted upload

A vulnerability classified as critical has been found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. This affects an unknown part of the file /Tool/uploadfile.php. The manipulation of the argument fileupload leads to unrestricted upload. It is...

CVE-2023-5148 D-Link DAR-7000/DAR-8000 uploadfile.php unrestricted upload

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231. It has been declared as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument fileupload leads to unrestricted upload. The attack can ...

Design/Logic Flaw

An issue was discovered in XiaoCms 20141229. It allows remote attackers to execute arbitrary code by using the type parameter to bypass the standard admin\controller\uploadfile.php restrictions on uploaded file types jpg, jpeg, bmp, png, gif, as demonstrated by an...

CVE-2018-19196

An issue was discovered in XiaoCms 20141229. It allows remote attackers to execute arbitrary code by using the type parameter to bypass the standard admin\controller\uploadfile.php restrictions on uploaded file types jpg, jpeg, bmp, png, gif, as demonstrated by an...

PHPCollab 2.5 - uploadfile.php Crafted Request Arbitrary Non-PHP File Upload

PHPCollab 2.5 - uploadfile.php Crafted Request Arbitrary Non-PHP File Upload source: https://www.securityfocus.com/bid/53675/info phpCollab is prone to an unauthorized-access and an arbitrary-file-upload vulnerabilities. Attackers can leverage these issues to gain unauthorized access to applicati...

PHPCollab 2.5 - 'uploadfile.php' Crafted Request Arbitrary Non-PHP File Upload

source: https://www.securityfocus.com/bid/53675/info phpCollab is prone to an unauthorized-access and an arbitrary-file-upload vulnerabilities. Attackers can leverage these issues to gain unauthorized access to application data and to upload and execute arbitrary code in the context of the...

CVE-2008-2510

CVE-2008-2510 is a SQL injection vulnerability in the WordPress Upload File plugin, specifically in wp-uploadfile.php, where the f_id parameter enables remote attackers to execute arbitrary SQL commands. The issue is documented across multiple sources (NVD/NVD list and patch coverage) as affectin...

WordPress File Upload Plugin - SQL Injection

Because of this vulnerability in wp-uploadfile.php, the attackers can execute arbitrary SQL commands via the "fid" parameter. Solution Update the plugin...

WordPress Upload File插件wp-uploadfile.php SQL注入漏洞

BUGTRAQ ID: 29352 WordPress是一款免费的论坛Blog系统。 WordPress中所使用的Upload File插件中wp-uploadfile.php文件没有验证某些用户所提交的参数，远程攻击者可以向该插件提交恶意请求执行SQL注入攻击。 WordPress WordPress --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://wordpress.org/...

CVE-2004-1545

The CVE-2004-1545 vulnerability affects MoniWiki (versions 1.0.9.2 and earlier) when used with Apache mod_mime. UploadFile.php fails to properly handle files with two extensions (e.g., .php.hwp), allowing remote attackers to upload and execute arbitrary code. This is triggered by the file-extensi...