8 matches found
Arbitrary File Upload
Overview Affected versions of this package are vulnerable to Arbitrary File Upload via the chunkUpload function in UploadService.php. An attacker can upload arbitrary files by sending crafted requests to the affected endpoint. Remediation A fix was pushed into the master branch but not yet...
EUVD-2020-14555
Malware in sbrugna...
CVE-2021-29377: Unrestricted Upload of File with Dangerous Type
Pear Admin Think through 2.1.2 has an arbitrary file upload vulnerability that allows attackers to execute arbitrary code remotely. A .php file can be uploaded via admin.php/index/upload because app/common/service/UploadService.php mishandles fileExt...
PT-2021-18191
Name of the Vulnerable Software and Affected Versions: Pear Admin Think through version 2.1.2 Description: The issue allows attackers to execute arbitrary code remotely due to an arbitrary file upload vulnerability. This is possible because a .php file can be uploaded via the...
CVE-2020-21787
CRMEB 3.1.0+ is vulnerable to File Upload Getshell via /crmeb/crmeb/services/UploadService.php...
Unrestricted file upload
CRMEB 3.1.0+ is vulnerable to File Upload Getshell via /crmeb/crmeb/services/UploadService.php...
PT-2021-10665
Name of the Vulnerable Software and Affected Versions: CRMEB versions 3.1.0 and later Description: The issue concerns a File Upload Getshell vulnerability via the /crmeb/crmeb/services/UploadService.php endpoint. This allows for potential exploitation. Recommendations: For CRMEB versions 3.1.0 an...