Arbitrary File Download Vulnerability in Mixcall Attendant Management System File Parameter

Mixcall seat management system is based on B/S architecture, the management personnel can directly log into the Mixcall seat management center through the computer, and view the detailed situation related to the seat personnel's voice services. An arbitrary file download vulnerability exists in t...

seaplane.aero XSS vulnerability

Vulnerable URL: http://www.seaplane.aero/images/pdf/download.php?name=FlyerMBLFBodeneffektfahrzeugINAvia.pdf" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 23283531 VIP website...

DVFolderContent Module 'download.php' local file inclusion vulnerability in Joomla!

Joomla! is an open source content management system CMS. A local file inclusion vulnerability exists in the Joomla! DVFolderContent Module 'download.php' due to a failure to adequately clean user input data. An attacker could exploit this vulnerability to obtain sensitive information or execute...

casip.bandungkab.go.id XSS vulnerability

Vulnerable URL: http://casip.bandungkab.go.id/download.php?id=prompt'OPENBUGBOUNTY'...

wordpress force force-download.php parameter file arbitrary File Download vulnerability

No description provided by source...

ZTE enterprise gateway system modules/system/download.php arbitrary File Download vulnerability

No description provided by source...

ZTE gateway device /modules/service/download.php the file id parameter local file include vulnerability

No description provided by source...

Webnet CMS download.php parameters filename arbitrary File Download vulnerability

No description provided by source...

XuezhuLi FileSharing - Directory Traversal

XuezhuLi FileSharing - Directory Traversal Exploit Title: XuezhuLi FileSharing - Path Traversal Vulnerability Date: 2016-06-23 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: https://github.com/XuezhuLi Software Link:...

XuezhuLi FileSharing - Directory Traversal

Exploit Title: XuezhuLi FileSharing - Path Traversal Vulnerability Date: 2016-06-23 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: https://github.com/XuezhuLi Software Link: https://github.com/XuezhuLi/FileSharing/archive/master.zip Version: Latest commit Tested on:...

XuezhuLi FileSharing Path Traversal

Exploit Title: XuezhuLi FileSharing - Path Traversal Vulnerability Date: 2016-06-23 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: https://github.com/XuezhuLi Software Link: https://github.com/XuezhuLi/FileSharing/archive/master.zip Version: Latest commit Tested on:...

Arbitrary File Traversal Vulnerability in Reporter System of Shanghai Bingfeng Computer Network Technology Co.

Shanghai Bingfeng Computer Network Technology Co., Ltd. is a domestic VPN, Traffic Management, Behavior Management, Link Load Balancing, Next Generation Firewall equipment supplier and IT value solution provider. Bingfeng network reporter system is a set of data report management system. Shanghai...

lsgalilei.org XSS vulnerability

Vulnerable URL: https://www.lsgalilei.org/elearning/claroline/backends/download.php?url=aHR0cDovL2cuZTxzdmcgb25sb2FkPWFsZXJ0KCJYU1NQT1NFRCIpPg===true=INGDIP Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicl...

Wordpress RedSteel Theme-download.php任意文件下载漏洞

No description provided by source...

Reflected Cross-Site Scripting Vulnerability in MetInfo Version 5.3.3

MetInfo is an enterprise website management system with PHP Mysql architecture. A reflective cross-site scripting vulnerability exists in MetInfo version 5.3.3. An attacker can exploit the vulnerability to conduct cross-site scripting attacks. The vulnerability exists in the following pages:...

Joomla 插件fsave v2.0 download.php 任意文件下载漏洞

No description provided by source...

Joomla Fsave 2.0 Local File Disclosure

. | | / | | \ \ | | \ / | |\ / / /\ \ / \ | Y / ^ / / || / / / / /\ /\ \ \ \ | / \ / / \ | \ \ / // / \ / / / / Joomla = fsave Plugin Local File Disclosure Vulnerability My + Author : KnocKout Contact : [email protected] Skype : [email protected] HomePage : http://milw00rm.com -...

Netentsec ASG网康应用安全网关在commonpluginDownload.php存在任意文件下载漏洞

0x01漏洞简介 Netentsec ASG网康应用安全网关在/commonplugin/Download.php存在任意文件下载漏洞。远程攻击者可以利用参数licensefile 或者 reqfile 结合..下载任意文件。如果下载文件是SvrLicense.license表示该漏洞已经修复，如果下载文件为自己包含的文件，说明该漏洞仍然存在。 0x02漏洞分析 查看问题代码如下： obstart""; header"Expires: Sat, 01 Jan 2000 00:00:00 GMT"; header"Last-Modified: ".gmdate"D, d M Y...

moteko.net XSS vulnerability

Vulnerable URL: http://www.moteko.net/portal/download.php?client=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculat...

LineNity WP Premium Theme Local File Inclusion Vulnerability

LineNity WP premium theme suffers from a local file inclusion vulnerability. Document Title: =============== LineNity WP Premium Theme - File Include Vulnerability Product & Service Introduction: =============================== Linenity wordpress theme is a that features a clean and flexible desi...