27 matches found
CVE-2024-34523
AChecker 1.5 allows remote attackers to read the contents of arbitrary files via the download.php path parameter by using Unauthenticated Path Traversal. This occurs through readfile in PHP. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
EUVD-2010-3453
Malware in sbrugna...
CVE-2024-34523
AChecker 1.5 allows remote attackers to read the contents of arbitrary files via the download.php path parameter by using Unauthenticated Path Traversal. This occurs through readfile in PHP. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2024-34523
AChecker version 1.5 is vulnerable to an Unauthenticated Path Traversal vulnerability in the download.php path parameter. This flaw occurs due to the improper use of the readfile function in PHP, allowing remote attackers to read the contents of arbitrary files. It is explicitly noted that this v...
PT-2024-25946 · Achecker · Achecker
Name of the Vulnerable Software and Affected Versions: AChecker version 1.5 Description: The issue allows remote attackers to read the contents of arbitrary files via the "download.php" path parameter by using Unauthenticated Path Traversal. This occurs through the readfile function in PHP. It is...
AChecker 安全漏洞
AChecker is an automated accessibility checker open-sourced by the Inclusive Design Institute. It is used to evaluate the accessibility of HTML pages and to help ensure that everyone, including people with disabilities, can use assistive technology to browse the Internet. A security vulnerability...
CVE-2024-34523
AChecker 1.5 allows remote attackers to read the contents of arbitrary files via the download.php path parameter by using Unauthenticated Path Traversal. This occurs through readfile in PHP. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2024-34523: Improper Limitation of a Pathname to a Restricted Directory
AChecker 1.5 allows remote attackers to read the contents of arbitrary files via the download.php path parameter by using Unauthenticated Path Traversal. This occurs through readfile in PHP. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
AChecker 1.2 - Multiple Error-Based SQL Injection vulnerabilities
No description provided by source. AChecker 1.2 Multiple Error-Based SQL Injection vulnerabilities Vendor: ATutor Inclusive Design Institute Product web page: http://www.atutor.ca Affected version: 1.2 build r530 Summary: AChecker is an open source Web accessibility evaluation tool. It can be use...
Atutor AChecker Multiple SQL Injection and XSS Vulnerabilities
This host is running Atutor AChecker and is prone to multiple cross site scripting and SQL injection vulnerabilities. OpenVAS Vulnerability Test $Id: gbatutoracheckermultsqlinjnxssvuln.nasl 7006 2017-08-25 11:51:20Z teissa $ Atutor AChecker Multiple SQL Injection and XSS Vulnerabilities Authors:...
AChecker 1.2 Multiple Error-Based SQL Injection vulnerabilities
Exploit for php platform in category web applications Vendor: ATutor Inclusive Design Institute Product web page: http://www.atutor.ca Affected version: 1.2 build r530 Summary: AChecker is an open source Web accessibility evaluation tool. It can be used to review the accessibility of Web pages...
ATutor AChecker 1.2 Cross Site Scripting / Path Disclosure
AChecker 1.2 Multiple Remote XSS/PD Vulnerabilities Vendor: ATutor Inclusive Design Institute Product web page: http://www.atutor.ca Affected version: 1.2 build r530 Summary: AChecker is an open source Web accessibility evaluation tool. It can be used to review the accessibility of Web pages base...
AChecker 1.2 Multiple Error-Based SQL Injection vulnerabilities
Summary AChecker is an open source Web accessibility evaluation tool. It can be used to review the accessibility of Web pages based on a variety international accessibility guidelines. Description Input passed via the parameter 'myownpatchid' in '/updater/patchedit.php' and the parameter 'id' in...
AChecker 1.2 - Multiple Error-Based SQL Injection Vulnerabilities
AChecker 1.2 Multiple Error-Based SQL Injection vulnerabilities Vendor: ATutor Inclusive Design Institute Product web page: http://www.atutor.ca Affected version: 1.2 build r530 Summary: AChecker is an open source Web accessibility evaluation tool. It can be used to review the accessibility of We...
AChecker 1.2 Multiple Remote XSS/PD Vulnerabilities
Summary AChecker is an open source Web accessibility evaluation tool. It can be used to review the accessibility of Web pages based on a variety international accessibility guidelines. Description AChecker suffers from multiple cross-site scripting and path disclosure vulnerabilities. Input thru...
ATutor AChecker 1.2 SQL Injection
AChecker 1.2 Multiple Error-Based SQL Injection vulnerabilities Vendor: ATutor Inclusive Design Institute Product web page: http://www.atutor.ca Affected version: 1.2 build r530 Summary: AChecker is an open source Web accessibility evaluation tool. It can be used to review the accessibility of We...
AChecker 1.2 - Multiple Error-Based SQL Injection Vulnerabilities
AChecker 1.2 - Multiple Error-Based SQL Injection Vulnerabilities AChecker 1.2 Multiple Error-Based SQL Injection vulnerabilities Vendor: ATutor Inclusive Design Institute Product web page: http://www.atutor.ca Affected version: 1.2 build r530 Summary: AChecker is an open source Web accessibility...
CVE-2010-3455
Cross-site scripting XSS vulnerability in index.php in AChecker 1.0 allows remote attackers to inject arbitrary web script or HTML via the uri parameter...