Unrestricted file upload.

Campcodes Complete Advance Loan Management System banner.php move_uploaded_file unrestricted upload

• Campcodes Complete Advance Loan Management System
• Broken access control
• Unrestricted file upload

Unrestricted file upload in Yealink Plug-in Softwares

• Yealink Plug-in Softwares
• Unrestricted file upload

WPvivid Backup & Migration 0.9.117 - 0.9.136 - Admin+ Arbitrary File Upload via wpvivid_upload_import_files

• WPvivid — Backup, Migration & Staging
• Unrestricted file upload

Bagisto before 2.4.5 Stored XSS via RMA Conversation Attachment Upload

• Webkul Bagisto
• Unrestricted file upload

Volmarg Personal Management System through 2.1.0 Unrestricted File Upload RCE via /upload/send/

• volmarg personal-management-system
• Unrestricted file upload

BuddyBoss App <= 3.2.1 - Authenticated (Subscriber+) Arbitrary File Upload via Feedback Endpoint

• BuddyBoss App
• Unrestricted file upload

Advanced Custom Fields: Extended PRO <= 0.9.2.6 - Unauthenticated Remote Code Execution via Dynamic Render Field Type

• ACF Extended Advanced Custom Fields: Extended PRO
• Unrestricted file upload

Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables < 3.7.8

• joomlaboat.com Custom Tables extension for Joomla
• Unrestricted file upload

Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3

• dj-extensions.com DJ-Classifieds extension for Joomla
• Unrestricted file upload

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.4.1 - Authenticated (Custom+) Remote Code Execution via XML-RPC 'meta_data' Mass Assignment and Path Traversal

• smub Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery
• Unrestricted file upload

SimpleForm <= 3.10.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename via Unknown File Key in simpleform_get_submit_data

• wpazleen SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications
• Unrestricted file upload

Project Manager <= 4.1.1 - Unauthenticated Remote Code Execution via 'id' Parameter Function Injection

• wedevs Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker
• Unrestricted file upload

37954679 cak-filemanagement-system add_logs.php move_uploaded_file unrestricted upload

• 37954679 cak-filemanagement-system
• Broken access control
• Unrestricted file upload

Photo Gallery, Sliders, Proofing and Themes <= 4.4.1 - Authenticated (Custom+) Local File Inclusion via Lightroom 'gallery_edit' Task property_list + Image Upload

• smub Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery
• Unrestricted file upload

Avada | Website Builder For WordPress & WooCommerce <= 7.16.2 - Unauthenticated Arbitrary File Upload via Avada Form Upload Field

• ThemeFusion Avada | Website Builder For WordPress & WooCommerce
• Unrestricted file upload

SOCFortress CoPilot: Arbitrary Host File Write as Root via Path Traversal in the ScoutSuite GCP Report Upload (RCE)

• socfortress CoPilot
• Path traversal
• Unrestricted file upload

Arbitrary File Upload in Protectel

• ARKETEAM PROTECTELMAJ
• ARKETEAM BDF
• Unrestricted file upload

Docat has Arbitrary File Upload exists in Upload API

• docat
• Unrestricted file upload

Parse Server vulnerable to stored XSS via malformed Content-Type bypassing file upload extension blocklist

• Unrestricted file upload

<8.6.84 || >=9.0.0, <9.10.0-alpha.2 · fixed in 8.6.84, 9.10.0-alpha.2

Virtual Folder Path Confinement Bypass in Progress WS_FTP Server

• Progress Software WS_FTP Server
• Path traversal
• Unrestricted file upload

Host Administrator Path Containment Bypass in Progress WS_FTP Server

• Progress Software WS_FTP Server
• Path traversal
• Unrestricted file upload

Chat AI with Dispatcher < 2.4 - Unauthenticated Arbitrary File Upload

• Chat AI with Dispatcher
• Unrestricted file upload

Stored XSS via Pre-Login Notice Image Upload Serves Attacker HTML from Application Origin

• Apereo Foundation openEQUELLA
• Unrestricted file upload

HCL BigFix AEX is affected by multiple security vulnerabilities.

• HCL Software BigFix AEX
• Cross-site scripting (XSS)
• Broken access control

Contact Manager <= 9.1.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist Bypass

• kleor Contact Manager
• Unrestricted file upload

The Innovative Form Builder <= 1.5.1 - Authenticated (Custom+) Arbitrary File Upload via 'allowedFileExtensions' Configuration + Public /form/submission/ Multipart Upload

• melograno The Innovative Form Builder – IvyForms
• Unrestricted file upload

Checkout Files Upload for WooCommerce < 2.4.0 - Unauthenticated Arbitrary File Upload

• Checkout Files Upload for WooCommerce
• Unrestricted file upload

affiliate-toolkit <= 3.9.2 - Authenticated (Contributor+) Arbitrary File Upload via 'atkp_product_largeimageurl' Parameter

• cservit affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display
• Unrestricted file upload

Pie Register Premium <= 3.8.4.0 - Unauthenticated Arbitrary File Upload via piereg_file_upload AJAX Handler

• Pie Register Premium
• Unrestricted file upload

Xerte Online Toolkits through 3.15.5 RCE via Language Pack Import

• thexerteproject xerteonlinetoolkits
• Unrestricted file upload

C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Unrestricted File Upload via Image Fields

• C97net qEngine CMS
• C97net Kemana Directory
• Unrestricted file upload

oretnom23 php-travel-agency-system employee_insert.php unrestricted upload

• oretnom23 php-travel-agency-system
• Broken access control
• Unrestricted file upload

Unrestricted Upload of File in PuMuKIT application

• PuMuKIT
• Unrestricted file upload

SourceCodester Online Food Ordering System add_food.php unrestricted upload

• SourceCodester Online Food Ordering System
• Broken access control
• Unrestricted file upload

An unrestricted file upload vulnerability exists in the campaign import feature of Mautic 7.

• Code injection
• Unrestricted file upload

Oray Pugongying X5 Pro PPPoE WAN Setting upload_files plugin_init unrestricted upload

• Oray Pugongying X5 Pro
• Broken access control
• Unrestricted file upload

GouGuOA Api.php chunkUpload unrestricted upload

• GouGuOA
• Broken access control
• Unrestricted file upload

KodCloud KodExplorer Online Editor Save Endpoint editor.class.php unrestricted upload

• KodCloud KodExplorer
• Broken access control
• Unrestricted file upload

prasathmani TinyFileManager Remote URL File Upload tinyfilemanager.php unrestricted upload

• prasathmani TinyFileManager
• Broken access control
• Unrestricted file upload

baserCMS: BcCustomContent file fields can be configured to allow executable file extensions such as php, leading to arbitrary PHP file upload

• baserproject basercms
• Unrestricted file upload

Depicter 4.0.5 - 4.8.1 - Editor+ Arbitrary File Upload via Media Upload

• Depicter — Popup & Slider Builder
• Unrestricted file upload

Part-DB: SVG Sanitization Bypass via Extension Spoofing Leads to Stored XSS in Attachment Viewer

• Part-DB-server
• Cross-site scripting (XSS)
• Unrestricted file upload

Part-DB: Authenticated RCE via .phar attachment upload served from public/media

• Part-DB-server
• Unrestricted file upload

Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52

• yootheme.com YOOtheme Pro extension for Joomla
• Unrestricted file upload

file-management-system FileController.php store unrestricted upload

• file-management-system
• Broken access control
• Unrestricted file upload

oretnom23 file-management-system-php admin_class.php save_files unrestricted upload

• oretnom23 file-management-system-php
• Broken access control
• Unrestricted file upload

WordPress WP Mailster plugin <= 1.9.1.0 - Arbitrary File Upload vulnerability

• WP Mailster
• Unrestricted file upload

WordPress Mang Board WP plugin <= 2.4.4 - Arbitrary File Upload vulnerability

• Kitae Park Mang Board WP
• Unrestricted file upload

Trudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogo

• polonel trudesk
• Unrestricted file upload

IBM Cyber Fraud includes components with multiple known vulnerabilities

• IBM Cyber Fraud
• Unrestricted file upload

DrayTek Vigor2960 commonupload mainfunction.cgi unrestricted upload

• DrayTek Vigor2960
• Broken access control
• Unrestricted file upload

arizu-id fast-tunnel Plugin Installer api_plugins.php extractTo unrestricted upload

• arizu-id fast-tunnel
• Broken access control
• Unrestricted file upload

Eptura Archibus Workflow Rule Enables Unauthenticated Arbitrary File Upload Leading to Remote Code Execution

• Eptura Archibus
• Unrestricted file upload

vraj404 Criminal-Management-System home.php move_uploaded_file unrestricted upload

• vraj404 Criminal-Management-System
• Broken access control
• Unrestricted file upload

WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Upload vulnerability

• PT Norther Lights Production MapSVG
• Unrestricted file upload

DoubleScale | All-in-One CRM <= 1.5.1 - Authenticated (Subscriber+) Arbitrary File Upload via Portal 'ticketless' Attachment Endpoint

• samuelgallegos DoubleScale CRM | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More
• Unrestricted file upload

YaySMTP <= 2.7.7 - Authenticated (Subscriber+) Arbitrary File Upload via Attachment Filename Extension

• yaycommerce YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports
• Unrestricted file upload

ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.7 - Unauthenticated Arbitrary File Upload via IMAP Email Attachment

• elextensions ELEX WordPress HelpDesk & Customer Ticketing System
• Unrestricted file upload

Mang Board - 2.4.4 - Unauthenticated Arbitrary File Upload via 'image_path' Parameter

• kitae-park Mang Board
• Unrestricted file upload

EnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File Write

• EnergizeLab FastAPI AI inference server
• Path traversal
• Unrestricted file upload