WisdomGarden Tronclass 代码问题漏洞

WisdomGarden Tronclass ilearn is a teaching platform from China WisdomGarden, Inc. A security vulnerability exists in WisdomGarden Tronclass that stems from improper access control when uploading files. Affected products and versions: Tronclass ilearn app version 2.3.2 and Tronclass ilearn web...

DataEase 跨站脚本漏洞

DataEase is an open source data visualization and analysis tool. It is used to help users quickly analyze data and gain insights into business trends for business improvement and optimization. A cross-site scripting vulnerability exists in DataEase 1.18.4 and earlier versions that stems from not...

CVE-2023-25655

baserCMS is a Content Management system. Prior to version 4.7.5, any file may be uploaded on the management system of baserCMS. Version 4.7.5 contains a patch...

CVE-2023-1559

A vulnerability classified as problematic was found in SourceCodester Storage Unit Rental Management System 1.0. This vulnerability affects unknown code of the file classes/Users.php?f=save. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

Simple Online Hotel Reservation System 代码问题漏洞

Simple Online Hotel Reservation System is an online hotel reservation system. A code issue vulnerability exists in Simple Online Hotel Reservation System version 1.0, which stems from a problem with the file addroom.php that can lead to unrestricted uploads...

Simple and Beautiful Shopping Cart System 代码问题漏洞

Simple and Beautiful Shopping Cart System is an e-commerce platform. A code issue exists in version 1.0 of the Simple and Beautiful Shopping Cart System, which stems from a security issue with an unknown function in the file uploadera.php that results in unrestricted uploads...

CVE-2023-25923

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an attacker to upload files that could be used in a denial of service attack due to incorrect authorization. IBM X-Force ID: 247629...

IBM Security Guardium 安全漏洞

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A security vulnerability exists in IBM Security Guardium Ke...

RockOA 代码问题漏洞

RockOA Xinhuo is an open source office OA system . RockOA 2.3.2 version of the code problem vulnerability , the vulnerability stems from the file acloudCosAction.php.SQL function runAction has problems with the operation of the parameter fileid will lead to unrestricted uploads...

Simple and Nice Shopping Cart Script 代码问题漏洞

Simple and Nice Shopping Cart Script is simple and nice PHP shopping cart script. A vulnerability exists in SourceCodester Simple and Nice Shopping Cart Script version 1.0, which stems from a problem with the file uploaderm.php, where the operation of the parameter submit results in unrestricted...

Simple Music Player 代码问题漏洞

Simple Music Player is a simple music player by the individual developer Carlo Montero. A code issue vulnerability exists in SourceCodester Simple Music Player version 1.0, which stems from a problem with the file savemusic.php, where manipulation of the parameter filename can lead to unrestricte...

xzjie cms 代码问题漏洞

xzjie cms is xzjie individual developers of the cloud tower guest - cabin content publishing system. A code issue vulnerability exists in xzjie cms 1.0.3 and earlier versions, which stems from a problem with files/api/upload, where manipulation of the parameter uploadFile can lead to unrestricted...

K000133041: ModSecurity vulnerability CVE-2023-24021

Security Advisory Description Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over-reads on the Web Application Firewall when executing rules that read the FILESTMPCONTENT collection. CVE-2023-24021 Impact The...

Simple Art Gallery 代码问题漏洞

Simple Art Gallery is an art gallery application from Simple Art Gallery, Inc. A code issue vulnerability exists in Simple Art Gallery version 1.0 that stems from a problem with the function sliderPicSubmit in the file adminHome.php, which can lead to unrestricted uploads...

OPENSUSE-SU-2023:0075-1 Security update for python-Django

python-Django was update to fix: - CVE-2023-24580: Prevent DOS in file uploads. bsc1208082...

Online Pizza Ordering System 代码问题漏洞

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero Personal Developer. A code issue vulnerability exists in SourceCodester Online Pizza Ordering System version 1.0, which stems from a security issue in the function savemenu that results in unrestricted uploads...

PT-2023-20571 · Sitecore · Sitecore Xp/Xm

Name of the Vulnerable Software and Affected Versions: Sitecore XP/XM version 10.3 Description: An issue exists where an authenticated Sitecore user can upload language files without restrictions, leading to direct code execution on the content management server. Recommendations: For Sitecore XP/...

Online Tours & Travels Management System 代码问题漏洞

Online Tours & Travels Management System is an online tours management system by Mayuri K. Individual developer. A code issue exists in SourceCodester Online Tours & Travels Management System version 1.0, which is caused by an unknown function in the file admin/ab.php, which causes unrestricted...

CVE-2023-0351 CVE-2023-0351

The Akuvox E11 web server backend library allows command injection in the device phone-book contacts functionality. This could allow an attacker to upload files with executable command instructions...

CVE-2023-0351 CVE-2023-0351

The Akuvox E11 web server backend library allows command injection in the device phone-book contacts functionality. This could allow an attacker to upload files with executable command instructions...