Jan 6, 2021 · File Upload Restriction Bypass in Pluck CMS ≤ 4.7.13 allows an admin privileged user to gain access in the host through the “manage files” functionality.

A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access in the host through the "manage files" ...

File Upload Restriction Bypass in Pluck CMS ≤ 4.7.13 allows an admin privileged user to gain access in the host through the “manage… Jan 6, 2021. 136.

May 26, 2021 · A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access in the host through the manage files ...

Dec 16, 2020 · A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access in the host through the manage files ...

Dec 1, 2020 · The application uses blacklist extensions to restrict the php malicious file which can be easily bypassed with .phar extension.

Dec 11, 2020 · Local File Inclusion vulnerability in Car Rental Management System 1.0 allows an unauthenticated adversary to include PHP files or any system files.

Aug 4, 2024 · In this write-up, I wanna share with you a vulnerability in file upload functionality, which allowed me to execute command remotely.