CVE-2016-10037

Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted id aka dir parameter, related to browser/directory/getlist...

CVE-2016-10037

Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted id aka dir parameter, related to browser/directory/getlist...

CVE-2016-10037

MODX Revolution

libdwarf heap buffer overflow vulnerability (CNVD-2016-10037)

libdwarf is a set of tools for reading and writing DWARF2 debugging information. A heap buffer overflow vulnerability exists in libdwarf 20161001 and earlier versions. The vulnerability stems from the program failing to perform proper bounds checking on user-submitted input. An attacker could...

CVE-2014-10037

DomPHP 0.83 and earlier is affected by a directory traversal vulnerability. The Nuclei template details that an attacker can exploit via a part of the URL parameter to photoalbum/index.php (.. traversal) to read, modify, or delete sensitive files on the server. The CVE entry confirms this issue w...