Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2024-2531 | MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 /admin/update-rooms.php unrestricted upload


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability classified as critical has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected is an unknown function of the file /admin/update-rooms.php. The manipulation leads to unrestricted upload. This vulnerability is traded as CVE-2024-2531. It is possible to launch the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ CVE-2023-6887 | saysky ForestBlog up to 20220630 Image Upload /admin/upload/img filename unrestricted upload


📈 39.07 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-11021 | Schlix CMS 2.1.8-7 File Upload admin/app/mediamanager unrestricted upload


📈 32.15 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2015-5681 | Powerplay Gallery Plugin 3.3 on WordPress File Upload upload.php unrestricted upload (ID 132671)


📈 31.12 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-3771 | easyii CMS File Upload Management helpers/Upload.php file unrestricted upload


📈 31.12 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2017-15054 | TeamPass up to 2.1.27.8 File Upload upload.files.php Parameter unrestricted upload (ID 865292)


📈 31.12 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-1970 | yuan1994 tpAdmin 1.3.12 Upload.php Upload file unrestricted upload


📈 31.12 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-19634 | verot.net class.upload up to 2.0.4 File Extension class.upload.php unrestricted upload


📈 31.12 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2015-1172 | Holding Pattern up to 0.6 File Upload admin/upload-file.php unrestricted upload (ID 130282 / BID-72546)


📈 31.12 Punkte
🕵️ Sicherheitslücken

🕵️ ArticleCMS 1.0 Image Upload /admin unrestricted upload


📈 31.01 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2018-17058 | JABA XPress Online Shop up to 2018-09-14 File Upload ProductEdit.aspx Parameter unrestricted upload


📈 29.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-1942 | SourceCodester Online Computer and Laptop Store 1.0 Avatar /admin/ unrestricted upload


📈 29.37 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-32994 | Halo CMS 1.5.3 upload unrestricted upload


📈 25.35 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2021-36461 | Microweber 1.1.3 Settings Upload Picture user.ini unrestricted upload (ID 751)


📈 25.35 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-34113 | Dataease 1.11.1 Plugin /api/plugin/upload unrestricted upload (ID 2431)


📈 25.35 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-34154 | ideasToCode Enable SVG, WebP & ICO Upload Plugin up to 1.0.1 on WordPress unrestricted upload


📈 25.35 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-34919 | Zengenti Contensis Classic prior 15.2.1.79 File Upload Wizard unrestricted upload


📈 25.35 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-38638 | Casdoor 1.97.3 /api/upload-resource fullFilePath unrestricted upload (ID 1035)


📈 25.35 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-40050 | ZFile 4.1.1 /file/upload/1 unrestricted upload


📈 25.35 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-37346 | Product Image Bulk Upload Plugin up to 4.1.0 on EC-CUBE unrestricted upload


📈 25.35 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-40048 | Flatpress 1.2.1 Upload File unrestricted upload (ID 152)


📈 25.35 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-42189 | Emlog Pro 1.6.0 Plugin Upload unrestricted upload


📈 25.35 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-22726 | act prior 0.2.40 GitHub Action /upload unrestricted upload (ID 1553)


📈 25.35 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-23314 | zdir 3.2.0 SSH File /api/upload unrestricted upload (ID 90)


📈 25.35 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-45527 | Future-Depth IMS 1.0 File Upload unrestricted upload


📈 25.35 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-1484 | xzjie cms up to 1.0.3 /api/upload uploadFile unrestricted upload (I6INIT)


📈 25.35 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-47186 | Generex UPS CS141 prior 2.06 /upload unrestricted upload


📈 25.35 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-44962 | Koha Library Software up to 23.05.04 upload-cover-image.pl unrestricted upload


📈 25.35 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-20195 | Cisco Identity Services Engine Software up to 3.2.0 p2 unrestricted upload (cisco-sa-ise-file-upload-FceLP4xs)


📈 25.35 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-20196 | Cisco Identity Services Engine Software up to 3.2.0 p2 unrestricted upload (cisco-sa-ise-file-upload-FceLP4xs)


📈 25.35 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-46865 | crater invoice up to 6.0.6 PNG Image upload-logo unrestricted upload (Issue 1267)


📈 25.35 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-5822 | Drag and Drop Multiple File Upload Contact Form 7 up to 1.3.7.3 on WordPress unrestricted upload


📈 25.35 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-48930 | Xinhu Xinhuoa 2.2.1 File Upload unrestricted upload


📈 25.35 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-7091 | Dreamer CMS 4.1.3 /upload/uploadFile file unrestricted upload


📈 25.35 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2018-18930 | TightRope Media Carousel Digital Signage 7.0.4.104 File Upload ZIP Archive unrestricted upload


📈 25.35 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-18204 | Zucchetti InfoBusiness up to 4.4.0 File Upload unrestricted upload


📈 25.35 Punkte
🕵️ Sicherheitslücken

matomo
•