Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2021-35261 | Yupoxion BearAdmin Upfile extend/tools/Ueditor unrestricted upload (ID 16)


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability has been found in Yupoxion BearAdmin and classified as critical. Affected by this vulnerability is an unknown functionality of the file extend/tools/Ueditor of the component Upfile Handler. The manipulation leads to unrestricted upload. This vulnerability is known as CVE-2021-35261. The attack can be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ CVE-2024-7342 | Baidu UEditor 1.4.3.3 controller.php upfile unrestricted upload


📈 74.65 Punkte
🕵️ Sicherheitslücken

🕵️ Ueditor in Onethink 1.0/1.1 getRemoteImage.php upfile Server-Side Request Forgery


📈 56.35 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-7705 | Fujian mwcms 1.0.0 Image Upload uploadeditor.html uploadeditor upfile unrestricted upload


📈 53.58 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-4272 | FeMiner wms savenewproduct.php upfile unrestricted upload (ID 14)


📈 46.72 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-40037 | Rawchen blog-ssm 1.0 /upFile unrestricted upload


📈 46.72 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-7706 | Fujian mwcms 1.0.0 /uploadfile.html uploadimage upfile unrestricted upload


📈 46.72 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2015-5681 | Powerplay Gallery Plugin 3.3 on WordPress File Upload upload.php unrestricted upload (ID 132671)


📈 32.03 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-3771 | easyii CMS File Upload Management helpers/Upload.php file unrestricted upload


📈 32.03 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2017-15054 | TeamPass up to 2.1.27.8 File Upload upload.files.php Parameter unrestricted upload (ID 865292)


📈 32.03 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-1970 | yuan1994 tpAdmin 1.3.12 Upload.php Upload file unrestricted upload


📈 32.03 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-6887 | saysky ForestBlog up to 20220630 Image Upload /admin/upload/img filename unrestricted upload


📈 32.03 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-19634 | verot.net class.upload up to 2.0.4 File Extension class.upload.php unrestricted upload


📈 32.03 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2015-1172 | Holding Pattern up to 0.6 File Upload admin/upload-file.php unrestricted upload (ID 130282 / BID-72546)


📈 32.03 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-6083 | PHPVibe 11.0.46 Media Upload Page upload-mp3.php file unrestricted upload


📈 32.03 Punkte
🕵️ Sicherheitslücken

🕵️ BearAdmin 0.5 download.html Directory Traversal


📈 31.21 Punkte
🕵️ Sicherheitslücken

🕵️ BearAdmin 0.5 index.html SQL Injection


📈 31.21 Punkte
🕵️ Sicherheitslücken

🕵️ BearAdmin 0.5 index.html sql injection


📈 31.21 Punkte
🕵️ Sicherheitslücken

🕵️ BearAdmin 0.5 download.html directory traversal


📈 31.21 Punkte
🕵️ Sicherheitslücken

🕵️ Medium CVE-2020-8147: Utils-extend project Utils-extend


📈 30.88 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-5812 | flusity CMS core/tools/upload.php handleFileUpload uploaded_file unrestricted upload


📈 30.85 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-9291 | kalvinGit kvf-admin up to f12a94dc1ebb7d1c51ee978a85e4c7ed75c620ff XML File upfile cross site scripting


📈 29.54 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-26812 | jfinal CMS up to 5.10 ueditor Route Privilege Escalation (ID 54)


📈 29.06 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-40543 | Sanluan PublicCMS 4.0.202302.e ueditor server-side request forgery


📈 29.06 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-7343 | Baidu UEditor 1.4.2 controller.php source[] cross site scripting


📈 29.06 Punkte
🕵️ Sicherheitslücken

🕵️ JEECMS getRemoteImage.jspx upfile Server-Side Request Forgery


📈 28.42 Punkte
🕵️ Sicherheitslücken

🕵️ UEditor 1.4.3.3 IFRAME src Cross Site Scripting


📈 27.93 Punkte
🕵️ Sicherheitslücken

🕵️ UEditor 1.4.3.3 IFRAME src cross site scripting


📈 27.93 Punkte
🕵️ Sicherheitslücken

🕵️ OFCMS up to 1.1.2 admin/ueditor/uploadFile Remote Code Execution


📈 27.93 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2016-1524 | Netgear Management System NMS300 up to 1.5.0.11 File Upload fileUpload.do unrestricted upload (ID 135618 / EDB-39412)


📈 25.16 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-32994 | Halo CMS 1.5.3 upload unrestricted upload


📈 25.16 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-2419 | URVE Web Manager upload.php unrestricted upload


📈 25.16 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-34113 | Dataease 1.11.1 Plugin /api/plugin/upload unrestricted upload (ID 2431)


📈 25.16 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-34154 | ideasToCode Enable SVG, WebP & ICO Upload Plugin up to 1.0.1 on WordPress unrestricted upload


📈 25.16 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-2736 | SourceCodester Company Website CMS Background Upload Logo Icon updatelogo.php xfile/ufile unrestricted upload


📈 25.16 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-34919 | Zengenti Contensis Classic prior 15.2.1.79 File Upload Wizard unrestricted upload


📈 25.16 Punkte
🕵️ Sicherheitslücken

matomo
•