CVE Vulnerability Catalog

A vulnerability was found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0 that allows unrestricted file uploads by manipulating the userFile argument in the /Service/FileHandler.ashx file.

A vulnerability was found in the Chengdu Flash Flood Disaster Monitoring and Warning System that allows unrestricted file uploads by manipulating the 'file' argument in the /Controller/Ajaxfileupload.ashx file.

A critical vulnerability was found in IBOS OA 4.5.5, affecting the actionEdit function of the file ?r=officialdoc/officialdoc/edit of the Mobile Notification Handler component. Manipulation of this function leads to SQL injection.

A critical vulnerability was found in IBOS OA version 4.5.5, affecting unknown processing of the file ?r=article/category/del in the Delete Category Handler component. Manipulation of this file leads to SQL injection.

A critical vulnerability has been found in the Chengdu Flash Flood Disaster Monitoring and Warning System 2.0. It affects unknown code in the file /App_Resource/UEditor/server/upload.aspx, leading to unrestricted file uploads.

A critical vulnerability was found in the Gen Technology Four Mountain Torrent Disaster Prevention and Control of Monitoring and Early Warning System affecting an unknown part of the file /Duty/AjaxHandle/UploadFloodPlanFileUpdate.ashx. Manipulation of the argument Filedata leads to unrestricted file uploads.

Version 1.6.3 of eyoucms was found to contain an information disclosure vulnerability via the component /custom_model_path/recruit.filelist.txt.

A vulnerability has been found in Bug Finder Foody Friend 1.0 that allows unrestricted file uploads by manipulating the profile_picture argument in the /user/profile file of the Profile Picture Handler component.

A critical vulnerability was found in Bug Finder ChainCity Real Estate Investment Platform 1.0, affecting an unknown functionality of the file /property in the GET Parameter Handler component. Manipulation of the argument name leads to SQL injection.

A critical vulnerability was found in Weaver e-cology, affecting unknown processing of the file filelFileDownloadForOutDoc.class in the HTTP POST Request Handler component. Manipulating the argument fileid with the input 1+WAITFOR+DELAY leads to SQL injection.

A vulnerability was found in Beijing Netcon NS-ASG 6.3, affecting an unknown part of the file /admin/test_status.php. The manipulation leads to direct request, which may be exploited by attackers.

Version 10.9.1.42602 of Office Suite Premium was found to contain a reflected XSS vulnerability via the filter parameter at /api?path=files.

The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for the /tmp/ directory without authentication, exposing sensitive information such as command history and screenshots of the file being processed.

Alkacon OpenCMS version 15.0 has an arbitrary file upload vulnerability in the /workplace#!explorer component that allows attackers to execute arbitrary code by uploading a crafted PNG file.

Version 10.9.1.42602 of Office Suite Premium was found to contain a reflected XSS vulnerability via the id parameter at /api?path=profile.

Diafan CMS v6.0 was discovered to contain a reflected cross-site scripting vulnerability via the cat_id parameter at /shop/?module=shop&action=search.

A critical vulnerability was found in IBOS OA 4.5.5, affecting the actionExport function of the file ?r=contact/default/export of the Personal Office Address Book component. Manipulation of this function leads to SQL injection.

Omnis Studio 10.22.00 has incorrect access control, allowing 'always private' Omnis libraries to be opened. Although this feature is supposed to be an irreversible operation, implementation issues allow bypassing specific checks.

Omnis Studio 10.22.00 has incorrect access control, allowing locked classes in Omnis libraries to be unlocked. This violates the expected behavior of an 'irreversible operation', enabling actions such as deleting, viewing, or modifying these classes.

IceWarp version 10.2.1 was found to have a cross-site scripting (XSS) vulnerability via the color parameter. An attacker can inject malicious JavaScript code that executes in the victim's browser.