Unrestricted file upload.

H3C CVM Unauthenticated File Upload via fileUpload/upload Token

• H3C CVM
• Unrestricted file upload

onetwothreeneth HospitalManagementSystem controller.php edit_patient unrestricted upload

• onetwothreeneth HospitalManagementSystem
• Broken access control
• Unrestricted file upload

YesWiki before 4.6.7 Unrestricted File Upload via Bazar CSV Import

• yeswiki
• Unrestricted file upload

Ninja Forms - File Uploads <= 3.3.34 - Unauthenticated Arbitrary File Upload

• SaturdayDrive Ninja Forms - File Uploads
• Unrestricted file upload

GetSimple CMS: CSRF, SSRF, and Unrestricted Zip Extraction

• GetSimpleCMS-CE
• Cross-site request forgery (CSRF)
• Unrestricted file upload

Unrestricted File Upload Leading to Remote Code Execution in Admin Tools File Manager

• Pandora FMS
• Unrestricted file upload

CSRF Bypass Leading to Remote Code Execution via Unrestricted File Upload in Plugin File Manager

• Pandora FMS
• Cross-site request forgery (CSRF)
• Unrestricted file upload

formtools.org Form Tools Ajax actions.php uploadFile unrestricted upload

• formtools.org Form Tools
• Broken access control
• Unrestricted file upload

Genians, Inc Genian SSL PNS Unrestricted File Upload

• Genians, Inc Genian SSL PNS (frodo-core)
• Genians, Inc Genian SSL PNS (watchcat-ui)
• Unrestricted file upload

Kiteworks Email Protection Gateway Remote Code Execution

• Kiteworks Email Protection Gateway
• Code injection
• Unrestricted file upload

Kiteworks Core Unrestricted Upload of File with Dangerous Type

• Kiteworks Core
• Unrestricted file upload

Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type

• Kiteworks Email Protection Gateway
• Authentication bypass
• Unrestricted file upload

yii2-starter-kit through 4.2.0 Unrestricted File Upload RCE

• yii2-starter-kit
• Unrestricted file upload

Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16

• ordasoft.com OrdaSoft Joomla CCK
• Unrestricted file upload

DigiWin｜EasyFlow .NET - Arbitrary File Upload

• DigiWin EasyFlow .NET
• Unrestricted file upload

Zella Theme < 2.6.3 - Unauthenticated Arbitrary File Upload

• Zella Theme
• Unrestricted file upload

gedelumbung HospitalManagement KCFinder File Manager app_user_login_model.php cekUserLogin unrestricted upload

• gedelumbung HospitalManagement
• Broken access control
• Unrestricted file upload

Toptech TMS7 and TopHAT Unrestricted Upload of File with Dangerous Type

• Toptech Systems TMS7
• Toptech Systems TopHAT
• Unrestricted file upload

Flowring Agentflow 4.0 - Unrestricted Upload of File with Dangerous Type

• Flowring Technology Corp Agentflow 4.0
• Unrestricted file upload

mwasikz robo-cafe-rms manage-food.php unrestricted upload

• mwasikz robo-cafe-rms
• Broken access control
• Unrestricted file upload

mall4j through 4.0 Unrestricted File Upload in Admin File Endpoints

• gz-yami mall4j
• Unrestricted file upload

FreePBX: Authenticated Remote Code Execution via File Upload and Convert in Soundlang Module

• FreePBX security-reporting
• Path traversal
• Unrestricted file upload

Acrel Electric Unet Web Service Upload Endpoint upload unrestricted upload

• Acrel Electric Unet Web Service
• Broken access control
• Unrestricted file upload

Authenticated File Write via HA Failover Config Upload leads to RCE

• Zohocorp DDI Central
• Unrestricted file upload

Authenticated File Write to RCE via keepalived in DDI Central

• Zohocorp DDI Central
• Privilege escalation
• Unrestricted file upload

Arbitrary File Upload Leading to Remote Command Execution in Bimser's eBA Plus

• Bimser Solution Software Trade Inc. eBA Plus Document and Workflow Management System
• Unrestricted file upload

Ultra Addons for Contact Form 7 <= 3.5.50 - Unauthenticated Arbitrary File Upload via Signature Form Field

• themefic Ultra Addons for Contact Form 7
• Unrestricted file upload

Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0

• acymailing.com AcyMailing Enterprise extension for Joomla
• Unrestricted file upload

Request a Quote for WooCommerce <= 2.9.2 - Unauthenticated Arbitrary File Upload via AJAX Popup Handler

• Addify Request a Quote for WooCommerce
• Unrestricted file upload

GestSup before 3.2.62 Remote Code Execution via IMAP Attachment

• GestSup
• Unrestricted file upload

Piwigo: Authenticated RCE via File Upload in Logo Upload Feature

• Piwigo
• Unrestricted file upload

Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface

• Honeywell PD45 Industrial Printer
• Path traversal
• Command injection

Unauthenticated RCE Arbitrary File Upload Honeywell PD45 Industrial Printer version F10.19.010040

• Honeywell PD45 Industrial Printer
• Command injection
• Authentication bypass

Command Injection Vulnerability in Netlink ICT HG323RW Router

• Netlink ICT Pvt Ltd Netlink ICT HG323RW Router
• Unrestricted file upload
• Broken access control

Laravel-Mediable 7.0.0 < 7.0.2 RCE via .pht File Upload

• plank laravel-mediable
• Unrestricted file upload

Neethuharii CafeManagement AddProductCode.php unrestricted upload

• Neethuharii CafeManagement
• Broken access control
• Unrestricted file upload

Multiple vulnerabilities in the Microweber administration panel

• Microweber Administration panel
• Unrestricted file upload

theRealSain Pixtream post_upload.php unrestricted upload

• theRealSain Pixtream
• Broken access control
• Unrestricted file upload

anirbandutta9 College-Notes-Gallery userprofile.php admin1 unrestricted upload

• anirbandutta9 College-Notes-Gallery
• Broken access control
• Unrestricted file upload

JosephChuks php-file-manager-with-code-editor Save codeEditor.php file_put_contents unrestricted upload

• JosephChuks php-file-manager-with-code-editor
• Broken access control
• Unrestricted file upload

JosephChuks php-file-manager-with-code-editor filemanager.php move_uploaded_file unrestricted upload

• JosephChuks php-file-manager-with-code-editor
• Broken access control
• Unrestricted file upload

An unrestricted upload of files with a dangerous type in the thumbnail-upload endpoint (/index.php?m=member&f=article&v=thumbUpload) of WuzhiCMS 5.0.0 allows an authenticated low-privileged member to…

• Unrestricted file upload

Tautulli: Path traversal / arbitrary file write via unsanitized upload filename in import_config and import_database

• Tautulli
• Path traversal
• Unrestricted file upload

MISP Blocklist Workflow Module: Arbitrary Script Execution via Unrestricted File Extension

• MISP
• Unrestricted file upload
• CWE-20

WooCommerce Online Product Designer 1.7.0 - < 2.15.0 - Unauthenticated Arbitrary File Upload

• Web to Print Online Designer
• Unrestricted file upload

EMLOG-Pro 2.6.29 contains a XSS vulnerability that enables attackers to upload a malicious shell.

• Cross-site scripting (XSS)
• Unrestricted file upload

Jazzware RT1000 Edge webUI v.

• Unrestricted file upload

Unrestricted Upload of File with Dangerous Type in core/modules/media.php in CuteNews v.2.1.2 allows remote authenticated users with access to the Media Manager panel to execute arbitrary code in the…

• Unrestricted file upload

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

• OrdaSoft.com OrdaSoft Joomla Gallery free extension for Joomla
• OrdaSoft.com OrdaSoft Joomla Gallery extension for Joomla
• Unrestricted file upload

NivoCart through 2.4.0 Arbitrary File Upload RCE via filemanager

• nivocart
• Unrestricted file upload

NextGEN Gallery < 4.5.0 - Authenticated Arbitrary File Upload via ZIP Import

• Photo Gallery, Sliders, Proofing and Themes
• Unrestricted file upload

Ultimate Addons for Contact Form 7 3.2.4 - 3.5.50 - Unauthenticated Arbitrary File Upload via Signature Field

• Ultra Addons for Contact Form 7
• Unrestricted file upload

Gravity Forms <= 3.1.0.4 - Unauthenticated Arbitrary File Upload via Hidden File Upload Field

• Gravity Forms
• Unrestricted file upload

WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box <= 3.8.3 - Authenticated (Subscriber+) Arbitrary File Upload via Media Import

• WP Cloud Plugins/_deleeuw_ Use-your-Drive | Google Drive plugin for WordPress
• _DeLeeuw_ Share-one-Drive | OneDrive & SharePoint plugin for WordPress
• Unrestricted file upload

ClipBucket < 5.5.3-#182 Remote Code Execution via Photo Upload Endpoint

• MacWarrior clipbucket-v5
• Unrestricted file upload

HCL BigFix Service Management is affected by multiple security vulnerabilities.

• HCL Software HCL BigFix Service Management
• Unrestricted file upload

Chamilo LMS CStudio upload flow allows unauthenticated remote code execution

• Path traversal
• Code injection

<2.0.1 · fixed in 2.0.1

HortusFox-Web < 6.1 Remote Code Execution via Import/Export

• danielbrendel hortusfox-web
• Unrestricted file upload

Multi Uploader for Gravity Forms <= 1.1.9 - Unauthenticated Arbitrary File Upload via Chunked File Upload

• sh1zen Multi Uploader for Gravity Forms
• Unrestricted file upload

Paid Downloads <= 3.15 - Unauthenticated Arbitrary File Upload via 'paiddownloads_update_file' Action

• ichurakov Paid Downloads
• Unrestricted file upload