CVE-2018-8056

Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via an invalid channelname parameter to /index.php?/manage/channel/addchannel or a direct request to /export.php...

CVE-2018-8056

Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via an invalid channelname parameter to /index.php?/manage/channel/addchannel or a direct request to /export.php...

CVE-2018-8056: Exposure of Sensitive Information to an Unauthorized Actor

Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via an invalid channelname parameter to /index.php?/manage/channel/addchannel or a direct request to /export.php...

PT-2018-18408

Name of the Vulnerable Software and Affected Versions: Western Bridge Cobub Razor version 0.8.0 Description: A physical path leakage issue exists due to an invalid channel name parameter. This can be exploited via a request to /index.php?/manage/channel/addchannel or a direct request to...

PT-2018-1122

Name of the Vulnerable Software and Affected Versions Schneider Electric U.motion Builder software versions prior to v1.3.4 Description The issue exists in the processing of track import export.php, where the underlying SQLite database query is subject to SQL injection on the object id input...

PT-2017-14439

Name of the Vulnerable Software and Affected Versions Web Viewer version 1.0.0.193 Description The issue allows remote authenticated attackers to upload and execute arbitrary PHP code via a filename with a .php extension in the "network ssl upload.php" endpoint. This is achieved by accessing the...

bqmc.upc.edu XSS vulnerability

Vulnerable URL: http://bqmc.upc.edu/export.php?bib=%22%3Etrolo%3Ci%3Etralala%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...

boutique.allocadeau.com XSS vulnerability

Open Bug Bounty ID: OBB-191246 Description| Value ---|--- Affected Website:| boutique.allocadeau.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Multiple Vulnerabilities in ZKN Cyber Sentinel

ZKXY Network Sentinel is an Internet security auditing system that integrates behavioral auditing and content auditing, and is deployed as a bypass at the network egress. ZKXN Network Sentry suffers from arbitrary file inclusion and arbitrary command execution vulnerabilities. The vulnerability...

CVE-2015-6670: Undefined Security Weakness

ownCloud Server before 7.0.8, 8.0.x before 8.0.6, and 8.1.x before 8.1.1 does not properly check ownership of calendars, which allows remote authenticated users to read arbitrary calendars via the calid parameter to apps/calendar/export.php...

PT-2015-2580

Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 7.0.8 ownCloud Server versions 8.0.x prior to 8.0.6 ownCloud Server versions 8.1.x prior to 8.1.1 Description The issue is related to improper ownership checking of calendars, allowing remote authenticated use...

Server: Calendar export: Authorization Bypass Through User-Controlled Key

Due to not properly checking the ownership of an calendar, an authenticated attacker is able to download calendars of other users via the "calid" GET parameter to export.php in /apps/calendar/ For more information please consult the official advisory. This advisory is licensed CC BY-SA 4.0...

ClaSS <= 0.8.60 (export.php ftype) Local File Inclusion Vulnerability

No description provided by source. ClaSS http://www.laex.org/class/ - =0.8.60 - magicquotesgpc = Off registerglobals = On - File Disclosure/Download - http://site/Class/class/scripts/export.php?ftype= /../../path/to/Class/school.php /../../path/to/Class/dbhconnect.php /../../etc/passwd - Timeline...

phpMyAdmin 2.x Export.PHP File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9564/info phpMyAdmin is prone to a vulnerability that may permit remote attackers to gain access to files that are readable by the hosting web server. The issue is reported to exist in the 'export.php' script and may be...

PT-2014-2449

Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 4.5.7 Description The issue allows remote authenticated users to read arbitrary calendars due to improper ownership checking of calendars. This can be achieved via the calid parameter to the...

CVE-2013-0304: Undefined Security Weakness

ownCloud Server before 4.5.7 does not properly check ownership of calendars, which allows remote authenticated users to read arbitrary calendars via the calid parameter to /apps/calendar/export.php. NOTE: this issue has been reported as a cross-site request forgery CSRF vulnerability, but due to...

PT-2014-4628

Name of the Vulnerable Software and Affected Versions Cacti versions 0.8.7g and earlier, 0.8.8b and earlier Description The issue allows remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors. This is related to the lib/graph export.php file...

PT-2014-2444

Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 4.0.12 ownCloud versions 4.5.x prior to 4.5.7 Description The issue allows remote attackers to hijack user authentication for various requests. This includes changing the timezone via the lat and lng parameters to...

PT-2013-5327

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 3.5.x prior to 3.5.8.2 phpMyAdmin versions 4.0.x prior to 4.0.4.2 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved through the scale parameter to "pmd pdf.php" ...

PT-2013-5326

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 3.5.x through 3.5.8.1 phpMyAdmin versions 4.0.x through 4.0.4.1 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted pageNumber value to "schema...