8640 matches found
Acyba AcyMailing 代码问题漏洞
Acyba AcyMailing is a suite of newsletter and marketing automation software from the Acyba team in France. A security vulnerability exists in Acyba AcyMailing versions prior to 8.3.0, which stems from incorrect input validation leading to the unrestricted upload of dangerous files...
Young Entrepreneur E-Negosyo System 代码问题漏洞
Young Entrepreneur E-Negosyo System is a Young Entrepreneur E-Negosyo System for janobe individual developers. A security vulnerability exists in version 1.0 of the SourceCodester Young Entrepreneur E-Negosyo System that stems from an incorrect manipulation of the parameter image resulting in...
PT-2023-2469 · Nextcloud +2 · Nextcloud Server +2
Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 24.0.10 Nextcloud Server versions prior to 25.0.4 Description: The issue is related to the lack of restrictions on file uploads in the Nextcloud server, allowing administrators to upload a logo or favicon wi...
HadSky 代码问题漏洞
HadSky is an original open source php light forum system from China's HadSky company. A security vulnerability exists in HadSky version 7.7.16, which stems from the presence of unrestricted uploads...
baserCMS vulnerable to arbitrary file uploads
Overview baserCMS provided by baserCMS Users Community allows an authenticated user to upload arbitrary files CWE-434. Taisei Inoue of GMO Cybersecurity by Ierae, Inc. and Yusuke Akagi of Mitsui Bussan Secure Directions, Inc., Shiga Takuma of BroadBand Security, Inc. reported this vulnerability t...
WisdomGarden Tronclass 代码问题漏洞
WisdomGarden Tronclass ilearn is a teaching platform from China WisdomGarden, Inc. A security vulnerability exists in WisdomGarden Tronclass that stems from improper access control when uploading files. Affected products and versions: Tronclass ilearn app version 2.3.2 and Tronclass ilearn web...
DataEase 跨站脚本漏洞
DataEase is an open source data visualization and analysis tool. It is used to help users quickly analyze data and gain insights into business trends for business improvement and optimization. A cross-site scripting vulnerability exists in DataEase 1.18.4 and earlier versions that stems from not...
CVE-2023-25655
baserCMS is a Content Management system. Prior to version 4.7.5, any file may be uploaded on the management system of baserCMS. Version 4.7.5 contains a patch...
CVE-2023-1559
A vulnerability classified as problematic was found in SourceCodester Storage Unit Rental Management System 1.0. This vulnerability affects unknown code of the file classes/Users.php?f=save. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...
Simple Online Hotel Reservation System 代码问题漏洞
Simple Online Hotel Reservation System is an online hotel reservation system. A code issue vulnerability exists in Simple Online Hotel Reservation System version 1.0, which stems from a problem with the file addroom.php that can lead to unrestricted uploads...
Simple and Beautiful Shopping Cart System 代码问题漏洞
Simple and Beautiful Shopping Cart System is an e-commerce platform. A code issue exists in version 1.0 of the Simple and Beautiful Shopping Cart System, which stems from a security issue with an unknown function in the file uploadera.php that results in unrestricted uploads...
CVE-2023-25923
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an attacker to upload files that could be used in a denial of service attack due to incorrect authorization. IBM X-Force ID: 247629...
IBM Security Guardium 安全漏洞
IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A security vulnerability exists in IBM Security Guardium Ke...
RockOA 代码问题漏洞
RockOA Xinhuo is an open source office OA system . RockOA 2.3.2 version of the code problem vulnerability , the vulnerability stems from the file acloudCosAction.php.SQL function runAction has problems with the operation of the parameter fileid will lead to unrestricted uploads...
Simple and Nice Shopping Cart Script 代码问题漏洞
Simple and Nice Shopping Cart Script is simple and nice PHP shopping cart script. A vulnerability exists in SourceCodester Simple and Nice Shopping Cart Script version 1.0, which stems from a problem with the file uploaderm.php, where the operation of the parameter submit results in unrestricted...
Simple Music Player 代码问题漏洞
Simple Music Player is a simple music player by the individual developer Carlo Montero. A code issue vulnerability exists in SourceCodester Simple Music Player version 1.0, which stems from a problem with the file savemusic.php, where manipulation of the parameter filename can lead to unrestricte...
xzjie cms 代码问题漏洞
xzjie cms is xzjie individual developers of the cloud tower guest - cabin content publishing system. A code issue vulnerability exists in xzjie cms 1.0.3 and earlier versions, which stems from a problem with files/api/upload, where manipulation of the parameter uploadFile can lead to unrestricted...
K000133041: ModSecurity vulnerability CVE-2023-24021
Security Advisory Description Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over-reads on the Web Application Firewall when executing rules that read the FILESTMPCONTENT collection. CVE-2023-24021 Impact The...
Simple Art Gallery 代码问题漏洞
Simple Art Gallery is an art gallery application from Simple Art Gallery, Inc. A code issue vulnerability exists in Simple Art Gallery version 1.0 that stems from a problem with the function sliderPicSubmit in the file adminHome.php, which can lead to unrestricted uploads...