Milad Karimi

A remote code execution flaw exists in the 'class-wc-meta-box-product-images.php' endpoint. The `product-type` parameter is processed without proper sanitization, allowing attackers to inject shell commands. This can lead to the creation of malicious PHP files within the web root, enabling the execution of arbitrary PHP code on the server.

The SecureLine service contains an unquoted service path, which occurs when a service executable path contains spaces and is not enclosed in quotation marks. This allows local non-privileged users to execute code with elevated SYSTEM privileges by injecting malicious executables into the service configuration path.

A remote code execution issue exists in the elFinder connector. Unauthenticated attackers can upload and execute arbitrary PHP files by sending POST requests to the 'connector.minimal.php' endpoint. By utilizing the `mkfile` and `put` commands, attackers can create malicious PHP files within the `file manager` directory and execute them on the server.

Insufficient validation in the theme's upload functionality allows unauthenticated attackers to upload arbitrary files to the theme directory. This can lead to remote code execution on the affected WordPress installation.

An issue in the WordPress Seotheme allows unauthenticated attackers to execute arbitrary PHP code by uploading malicious files to the theme directory. Attackers can access the uploaded PHP shell via the endpoint '/wp-content/themes/seotheme/mar.php' to execute system commands and upload additional files to maintain persistent access.

An issue allows unauthenticated attackers to upload arbitrary files by accessing the 'ups.php' endpoint. By utilizing the file upload form within the plugin directory, attackers can upload PHP files to execute arbitrary code on the server. Remote Code Execution (RCE) is the ability of an attacker to execute any command of their choice on a target machine.

A reflected cross-site scripting issue allows unauthenticated attackers to inject malicious scripts. This is achieved by sending crafted URLs to the 'code generator.php' endpoint using the `form id` parameter, which enables the execution of arbitrary JavaScript in the victim's browser.

A reflected cross-site scripting issue exists in the admin settings interface. Attackers can inject malicious scripts through the `page` parameter in the 'class-sms-log-display.php' file to execute arbitrary JavaScript in the browsers of administrators.

A reflected cross-site scripting issue allows unauthenticated attackers to inject malicious scripts into victim browsers. This is achieved by manipulating the `post id` parameter within the "grunion-form-view.php" endpoint, enabling the execution of arbitrary JavaScript.

A reflected cross-site scripting issue allows unauthenticated attackers to inject malicious scripts by manipulating the `file` parameter. Attackers can craft URLs containing script payloads in the `file` parameter of 'avatar uploader.pages.inc' to execute arbitrary JavaScript in the browsers of victims.

Remote code execution is possible due to unsanitized input in the 'ping.php' endpoint. Attackers can inject shell commands by appending shell metacharacters to the `ping` and `socket` parameters, allowing them to write arbitrary PHP files and execute system commands.

The software contains an unquoted service path, potentially allowing local attackers to execute arbitrary code with elevated system privileges. Exploitation involves the unquoted service path in the `OutlineService` executable, which could allow injection of malicious code to be executed with LocalSystem permissions.

The software contains a cross-site scripting issue in the slider import search feature and tab parameter. An attacker can inject malicious scripts through the `/ListTable.php` endpoint to execute arbitrary JavaScript in a victim’s browser. The vulnerable parameter is `tab`.

AnyDesk versions 7.0.15 and 9.0.1 have an unquoted service path configuration. This allows local, non-privileged users to potentially run code with SYSTEM-level privileges. An attacker can exploit this by injecting malicious executables that are then executed with high-level system permissions.

The issue allows unauthenticated users to upload arbitrary files, including malicious PHP code, which could lead to remote code execution (RCE). This is due to a lack of validation for uploaded files.