PHP Webshell Upload Over HTTP

An attacker might upload a webshell backdoor to a PHP server. A successful exploitation might allow the attacker to run arbitrary code, or use the server as a bot for further attacks...

SQL Injection Vulnerability in Farmers' Credit Information System of Nanning Desi Technology Co.

Nanning Desi Technology Co., Ltd, business scope includes computer software development and technical services; computer, office equipment sales and maintenance, etc.. A SQL injection vulnerability exists in the Farmer Credit Information System of Nanning Desi Technology Co. An attacker can utili...

OpenEMR 5.0.1.3 - 'manage_site_files' Remote Code Execution (Authenticated)

Exploit Title: OpenEMR 5.0.1.3 - 'managesitefiles' Remote Code Execution Authenticated Date 12.06.2021 Exploit Author: Ron Jost Hacker5preme Vendor Homepage: https://www.open-emr.org/ Software Link: https://github.com/openemr/openemr/archive/refs/tags/v5013.zip Version: Prior to 5.0.1.4 Tested on...

Catfish CMS suffers from a file upload vulnerability (CNVD-2021-42363)

Catfish catfish CMS is open source and free PHPCMS web content management system. Catfish CMS has a file upload vulnerability. An attacker can use the vulnerability to upload a webshell and gain server privileges...

SP Project & Document Manager < 4.22 - Authenticated Shell Upload

The plugin allows users to upload files, however, the plugin attempts to prevent php and other similar files that could be executed on the server from being uploaded by checking the file extension. It was discovered that php files could still be uploaded by changing the file extension's case, for...

File Upload Vulnerability in PatrolFlow Multiservice Security Gateway Intelligent Management Platform

Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. A file upload vulnerability exists in PatrolFlow Multi-service Security Gateway Intelligent Management Platform. Attackers ca...

File Upload Vulnerability in Lionfish Merchant Management System

Xiamen Lionfish Network Technology Co., Ltd. is an Internet innovation model software products and solutions as the core, mainly focusing on e-commerce system development and business solutions for high-tech enterprises. A file upload vulnerability exists in the Lionfish Merchant Management Syste...

File upload vulnerability in ClassCMS backend (CNVD-2021-35844)

ClassCMS is a content management system. A file upload vulnerability exists in the ClassCMS backend. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

File upload vulnerability in PHPOK backend

PHPOK is a set of enterprise website system developed in PHP + MYSQL language. A file upload vulnerability exists in the PHPOK backend. An attacker can exploit the vulnerability to upload webshell and gain server privileges...

File Upload Vulnerability in Fish Leap CMS Backend

FishLeap CMS is made up of a content management system that is specifically geared towards enterprise applications. A file upload vulnerability exists in the backend of Fishy CMS. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

File Upload Vulnerability in Digital Campus Integrated Management System of Anhui Kexun Education Equipment Co.

Anhui Kexun Education Equipment Co., Ltd. is a professional information technology integrated service provider specializing in computer software research and development, sales and service. A file upload vulnerability exists in the Digital Campus Integrated Management System of Anhui Kexun...

File Upload Vulnerability in Disk Enterprise LCMS

Pan Enterprise LCMS is a lightweight PHP development framework . A file upload vulnerability exists in PanEnterprise LCMS. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

Emlog 代码问题漏洞

Emlog is a PHP and MySQL based CMS builder by the individual developer of Emlog. A security vulnerability exists in emlog v6.0.0, which allows users to upload webshell via zip plugin module...

File Upload Vulnerability in UCMS Backend

UCMS is a simple open source content management system. A file upload vulnerability exists in the UCMS backend. An attacker can exploit the vulnerability to upload webshell and gain server privileges...

File upload vulnerability in We7 CMS (CNVD-2021-24741)

We7 CMS is a domestic asp.net-based at the same time with open source and open plug-in CMS system. A file upload vulnerability exists in We7 CMS. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

File Upload Vulnerability in NS-NGFW Backend of Netcom Next-Generation Firewalls

hereinafter referred to as Netcom was founded in 2004, is specialized in providing operators, finance, government, education, health care, enterprises, hotels, export integrated application gateway. A file upload vulnerability exists in the background of NS-NGFW. Attackers can utilize the...

Arbitrary File Upload Vulnerability in Website Management System of Hangzhou Boce Network Technology Co.

Hangzhou Bocai Network Technology Co., Ltd. provides comprehensive digital innovation services. An arbitrary file upload vulnerability exists in the website management system login of Hangzhou Boce Network Technology Co. An attacker could use this vulnerability to upload a webshell and gain serve...

File Upload Vulnerability in NGFW of Netcom Next Generation Firewall (CNVD-2021-24366)

Netcom Next Generation Firewall NGFW is an application layer firewall launched by Netcom Technology that can comprehensively deal with network threats. A file upload vulnerability exists in NGFW. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

File Upload Vulnerability in NGFW of Netcom NGFW

Netcom Next Generation Firewall NGFW is an application layer firewall launched by Netcom Technology that can comprehensively deal with network threats. A file upload vulnerability exists in NGFW. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

File Upload Vulnerability in KUKA.OfficeLite

KUKA.OfficeLite is KUKA's virtual robot controller. A file upload vulnerability exists in KUKA.OfficeLite. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...