EUVD-2021-32696

Malicious code in bioql PyPI...

CVE-2024-13210

A vulnerability was found in donglight bookstore电商书城系统说明 1.0. It has been declared as critical. Affected by this vulnerability is the function uploadPicture of the file src/main/java/org/zdd/bookstore/web/controller/admin/AdminBookController. java. The manipulation of the argument pictureFile lea...

CVE-2024-13210 donglight bookstore电商书城系统说明 AdminBookController. java uploadPicture unrestricted upload

A vulnerability was found in donglight bookstore电商书城系统说明 1.0. It has been declared as critical. Affected by this vulnerability is the function uploadPicture of the file src/main/java/org/zdd/bookstore/web/controller/admin/AdminBookController. java. The manipulation of the argument pictureFile lea...

CVE-2021-45990

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function uploadPicture. This vulnerability allows attackers to execute arbitrary commands via the picname parameter...

CVE-2021-45990

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function uploadPicture. This vulnerability allows attackers to execute arbitrary commands via the picname parameter...

Command injection

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function uploadPicture. This vulnerability allows attackers to execute arbitrary commands via the picname parameter...

CVE-2021-45990

The CVE-2021-45990 entry concerns Tenda G1 and G3 routers (firmware version v15.11.0.17(9502)_CN ). A command injection vulnerability exists in the function uploadPicture , exploitable via the pic_name parameter to execute arbitrary commands. This is described in the NVD/CVE records with high/cri...

CVE-2021-45990

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function uploadPicture. This vulnerability allows attackers to execute arbitrary commands via the picname parameter...

Yonja Remote File Upload Vulnerability

Exploit for unknown platform in category web applications ====================================== Yonja Remote File Upload Vulnerability ====================================== Exploit : 1- http://127.0.0.1/Yonja/Login.php 2- http://127.0.0.1/Yonja/UploadPicture.php 0day.today 2018-01-02...