PT-2022-11503 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: novel-plus version 3.6.1 Description: The issue allows unrestricted file uploads, which can lead to server attacks and arbitrary code execution due to unrestricted file suffixes and contents. Recommendations: For novel-plus version 3.6.1,...

NovelPlus 代码问题漏洞

NovelPlus is an application. An open source mobile social application and idea publishing platform. A security vulnerability exists in NovelPlus V3.6.1 that allows unrestricted file uploads. Unrestricted file extensions and content could lead to server attacks and arbitrary code execution...

FacturaScripts 跨站脚本漏洞

FacturaScripts is an open source ERP software by Carlos Garcia, an individual developer in Spain. A security vulnerability exists in FacturaScripts that originates from storing XSS in zip format in the GitHub repository neorazorx/facturascripts via the upload plugin feature. An attacker could...

Unrestricted File Upload

NopCommerce.Core is vulnerable to unrestricted file upload. The vulnerability exists because the UploadAvatar function of CustomerController.cs does not properly check the file type before uploading the file, allowing an attacker to perform arbitrary file uploads...

WordPress plugin Tripetto 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Tripetto plugin 5.1.4 and previous versions contain a cross-site scripting vulnerability th...

CVE-2021-25094

The Tatsu WordPress plugin before 3.3.12 addcustomfont action can be used without prior authentication to upload a rogue zip file which is uncompressed under the WordPress's upload directory. By adding a PHP shell with a filename starting with a dot ".", this can bypass extension control...

CVE-2021-4225

The SP Project & Document Manager WordPress plugin before 4.24 allows any authenticated users, such as subscribers, to upload files. The plugin attempts to prevent PHP and other similar files that could be executed on the server from being uploaded by checking the file extension. It was discovere...

Design/Logic Flaw

The SP Project & Document Manager WordPress plugin before 4.24 allows any authenticated users, such as subscribers, to upload files. The plugin attempts to prevent PHP and other similar files that could be executed on the server from being uploaded by checking the file extension. It was discovere...

pikachu

It is an offensive tool for web application security training. The primary CVE ID is not explicitly stated, but the tool is designed to demonstrate various web application vulnerabilities, including but not limited to: Burt Force brute force, XSS cross-site scripting, CSRF cross-site request...

CVE-2021-39040

IBM Planning Analytics Workspace 2.0 could be vulnerable to malicious file upload by not validating the file types or sizes. Attackers can make use of this weakness and upload malicious executable files into the system and it can be sent to victim for performing further attacks. IBM X-Force ID:...

Cross site scripting

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions prior to 10.0.0 one can exploit a lack of sanitization on SVG file uploads and inject javascript into their user avatar. As a result any user...

CVE-2022-29451

Cross-Site Request Forgery CSRF leading to Arbitrary File Upload vulnerability in Rara One Click Demo Import plugin = 1.2.9 on WordPress allows attackers to trick logged-in admin users into uploading dangerous files into /wp-content/uploads/ directory...

CVE-2022-24868: Improper Neutralization of Input During Web Page Generation

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions prior to 10.0.0 one can exploit a lack of sanitization on SVG file uploads and inject javascript into their user avatar. As a result any user...

GLPI 跨站脚本漏洞

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner cartridg...

PT-2022-7407 · Glpi +2 · Glpi +2

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.0 Description: The issue is related to a lack of sanitization on SVG file uploads, allowing an attacker to inject javascript into a user's avatar. This can lead to a cross-site scripting attack when any user views...

WordPress E4J s.r.l. VikBooking Hotel Booking Engine & PMS plugin代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The WordPress plugin is an application plugin. The WordPress VikBooking Hotel Booking Engine & PMS plugin is vulnerable to arbitrary file uploads due to...

Elcomplus SmartPPT 代码问题漏洞

Elcomplus SmartPPT is an integrated voice and data scheduling software from Elcomplus USA. A code issue vulnerability exists in Elcomplus SmartPPT that stems from a lack of restriction on the size or number of files that can be uploaded. An attacker could exploit this vulnerability to upload or...

CVE-2022-1091

The sanitisation step of the Safe SVG WordPress plugin before 1.9.10 can be bypassed by spoofing the content-type in the POST request to upload a file. Exploiting this vulnerability, an attacker will be able to perform the kinds of attacks that this plugin should prevent mainly XSS, but depending...

WSO2 API Manager 路径遍历漏洞

WSO2 API Manager is an API lifecycle management solution from US-based WSO2. WSO2 API Manager suffers from a path traversal vulnerability that allows unlimited file uploads and remote code execution...

CVE-2022-27261

An arbitrary file write vulnerability in Express-FileUpload v1.3.1 allows attackers to upload multiple files with the same name, causing an overwrite of files in the web application server...