CVE-2018-9156

An issue was discovered on AXIS P1354 IP camera Firmware version 5.90.1.1 devices. The upload web page doesn't verify the file type, and an attacker can upload a webshell by making a fileUpload.shtml request for a custom .shtml file, which is interpreted by the Apache HTTP Server modinclude modul...

CVE-2018-9156

An issue was discovered on AXIS P1354 IP camera Firmware version 5.90.1.1 devices. The upload web page doesn't verify the file type, and an attacker can upload a webshell by making a fileUpload.shtml request for a custom .shtml file, which is interpreted by the Apache HTTP Server modinclude modul...

CVE-2018-9156

An issue was discovered on AXIS P1354 IP camera Firmware version 5.90.1.1 devices. The upload web page doesn't verify the file type, and an attacker can upload a webshell by making a fileUpload.shtml request for a custom .shtml file, which is interpreted by the Apache HTTP Server modinclude modul...

PT-2018-18893 · Apache +1 · Apache Http Server +1

Name of the Vulnerable Software and Affected Versions: AXIS P1354 IP camera Firmware version 5.90.1.1 Description: An issue was discovered where the upload web page does not verify the file type, allowing an attacker to upload a webshell by making a fileUpload.shtml request for a custom .shtml...

PT-2018-18894 · Axis +1 · Axis M1033-W +1

Name of the Vulnerable Software and Affected Versions: AXIS M1033-W IP camera Firmware version 5.40.5.1 Description: An issue was discovered where the upload web page does not verify the file type, allowing an attacker to upload a webshell by making a fileUpload.shtml request for a custom .shtml...

YUNUCMS v1.0.7 \app\admin\controller\Upgrade.php has file upload vulnerability

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. YUNUCMS v1.0.7 \app\admin\controller\Upgrade.php has a file upload vulnerability. Allows an attacker to upload a webshell and gain serve...

File Upload Vulnerability in Monstra CMS Backend "Install New Plugin

Monstra CMS is a lightweight PHP-based content management system CMS developed by Ukrainian software developer Sergey Romanenko. The system is easy to install and use, scalable and so on. A file upload vulnerability exists in the "Install New Plugin" section of the Monstra CMS backend. The...

File Upload Vulnerability in QCMS Version 3.0.1

QCMS website management system is a PHP lightweight system developed through MVC architecture. A file upload vulnerability exists in QCMS version 3.0.1. An attacker can exploit the vulnerability to forge bypass the background login, upload webshell, and gain server privileges...

Webshell Bypass Vulnerability in Web Security Dog (IIS Edition)

Website Security Dog IIS Edition is a server tool that integrates website content security protection, website resource protection and website traffic protection features for comprehensive website security. Webshell bypass vulnerability exists in Web Security Dog IIS Edition. An attacker can uplo...

Weak password and remote command execution vulnerability in Lenovo firewalls

LFW800E is a Gigabit intelligent firewall developed by Lenovo Skyworks Networks for medium-sized enterprise users' network security applications. The Lenovo firewall has weak password and remote command execution vulnerabilities, which can be exploited by an attacker to successfully log in to the...

File Upload Vulnerability in Thunderwind Movie CMS V3.3.0 UsersController.class.php Page

Thunderwind Movie CMS is a PHP based THINKPHP3.2.3 framework development, suitable for all kinds of video, film and television websites, film and television content management program. Thunderwind Movie CMS V3.3.0 File upload vulnerability exists in the UsersController.class.php page. Allows an...

Hangzhou Allview Software Co., Ltd. college security integrated platform upLoadAttachment.php page has file upload vulnerability

Hangzhou Allview Software Co., Ltd. is a multinational company specializing in fire safety management. A file upload vulnerability exists in the upLoadAttachment.php page of the university security integrated platform of Hangzhou Allview Software Co. It allows attackers to exploit the vulnerabili...

Remote command execution vulnerability in NetMizer log management system qq.php file

The NetMizer log management system is a stand-alone log management and analysis tool. A remote command execution vulnerability exists in the NetMizer Log Management System qq.php file, allowing an attacker to upload a webshell and gain server privileges...

File Inclusion Vulnerability in Ocean CMS V6.57 cache.inc.php file

Ocean CMS seacms is a video-on-demand system designed for webmasters with different needs. A file inclusion vulnerability exists in the ocean CMS V6.57 cache.inc.php file. The vulnerability is due to the background modification of the configuration file at the user input is not filtered, the...

Codiad File Upload Vulnerability

Codiad is a set of Web-based IDE framework , it contains a project / file manager and code editor , mainly used for online writing and editing code . A file upload vulnerability exists in Codiad. An attacker can exploit this vulnerability to upload a webshell during installation...

CVE-2017-1000125

Codiadfull version is vulnerable to write anything to configure file in the installation resulting upload a webshell...

CVE-2017-1000125

Codiadfull version is vulnerable to write anything to configure file in the installation resulting upload a webshell...

Code execution vulnerability in SDCMS v1.2 themecontroller.php

SDCMS is a PHP 3-in-1 website management system independently developed by Fireworks Network. SDCMS v1.2 version themecontroller.php code execution vulnerability, the attacker by writing Webshell to obtain server privileges...

Reinstallation Bypass Vulnerability in ZZCMS Version 8.1

ZZCMS is an enterprise website builder. A reinstallation bypass vulnerability exists in ZZCMS version 8.1. The vulnerability is caused by determining whether the lock file is installed at step1, which can be directly submitted by POST to the later steps of the reinstallation, allowing an attacker...

Arbitrary File Upload Vulnerability in OTCMS v2.56

Net Titanium Article Management System OTCMS is a simple and good asp article management system. OTCMS v2.56 has an arbitrary file upload vulnerability. The vulnerability is due to the background upload file did not strictly check the file content and file suffix caused by the attacker is allowed...