CVE-2024-47319

HIGH Year: 2024
CVSS v3 Score
8.0
High
Weakness Type
CWE-434
View all →

Vulnerability Description

Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form – Contact Form Plugin allows Code Injection.This issue affects Bit Form – Contact Form Plugin: from n/a through 2.13.10.

Related Vulnerabilities

CVE-2013-6234

HIGH
CVSS:8.0(High)

Unrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, the...

CWE-4342013

CVE-2019-4069

HIGH
CVSS:8.0(High)

IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 does not properly validate file types, allowing an attacker to upload malicious content. IBM X-Force ID: 157014.

CWE-4342019

CVE-2020-12846

HIGH
CVSS:8.0(High)

Zimbra before 8.8.15 Patch 10 and 9.x before 9.0.0 Patch 3 allows remote code execution via an avatar file. There is potential abuse of /service/upload servlet in the webmail subsystem. A user can upl...

CWE-4342020

CVE-2020-4703

HIGH
CVSS:8.0(High)

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 Administrative Console could allow an authenticated attacker to upload arbitrary files which could be execute arbitrary code on the vulnerable server. T...

CWE-4342020

CVE-2020-4955

HIGH
CVSS:8.0(High)

IBM Spectrum Protect Operations Center 7.1 and 8.1could allow a remote attacker to execute arbitrary code on the system, caused by improper parameter validation. By creating an unspecified servlet req...

CWE-4342020

CVE-2020-7847

HIGH
CVSS:8.0(High)

The ipTIME NAS product allows an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can be leveraged to gain remote code execution. This issue affects: pTIME NAS 1.4.36.

CWE-4342020