PT-2023-21323

Name of the Vulnerable Software and Affected Versions go-bbs version 1 Description The issue is related to an arbitrary file download vulnerability. It can be exploited via the /api/v1/download API endpoint. Recommendations For go-bbs version 1, as a temporary workaround, consider disabling the...

CVE-2023-27755

go-bbs v1 was discovered to contain an arbitrary file download vulnerability via the component /api/v1/download...

CVE-2023-27755

CVE-2023-27755 (go-bbs v1) is an arbitrary file download vulnerability in the /api/v1/download component. The connection between the affected code path and unauthorized file access is stated across multiple sources, with the root issue described as an arbitrary file download via the download endp...

CVE-2023-27755

go-bbs v1 was discovered to contain an arbitrary file download vulnerability via the component /api/v1/download...

CVE-2023-27179

GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability via the filename parameter at /admin/imgdownload.php...

CVE-2023-27179

GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability via the filename parameter at /admin/imgdownload.php...

PT-2023-20991 · Unknown · Gdidees Cms

Name of the Vulnerable Software and Affected Versions: GDidees CMS versions 3.9.1 and lower Description: The issue is related to an arbitrary file download via the filename parameter at the "/ admin/imgdownload.php" API endpoint. This allows unauthorized access to files on the system...

CVE-2023-27179

GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability via the filename parameter at /admin/imgdownload.php...

CVE-2023-27179

GDidees CMS v3.9.1 and earlier exposes an arbitrary file download via the filename parameter on /_admin/imgdownload.php. Affected component is the imgdownload logic; the vulnerability occurs from unsanitized filename input and lack of proper admin session checks, enabling potential retrieval of a...

CVE-2023-27179

GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability via the filename parameter at /admin/imgdownload.php...

GDidees CMS 代码问题漏洞

GDidees CMS is a website builder from GDidees. A security vulnerability exists in GDidees CMS version v3.9.1 and earlier versions, which originated from a discovery of an arbitrary file download vulnerability via the filename parameter of /admin/imgdownload.php...

CVE-2023-27179: Unrestricted Upload of File with Dangerous Type

GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability via the filename parameter at /admin/imgdownload.php...

RuoYi vulnerable to arbitrary file download

An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrary files in the server...

GHSA-H4C9-RR5M-32FM RuoYi vulnerable to arbitrary file download

An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrary files in the server...

CVE-2023-27025

An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrary files in the server...

PT-2023-20906 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RuoYi versions 4.7.6 and below Description: An arbitrary file download issue in the background management module allows attackers to download arbitrary files on the server. Recommendations: For versions 4.7.6 and below, update to a version...

CVE-2023-27025

An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrary files in the server...

RuoYi 安全漏洞

RuoYi is a backend management system for individual developers of RuoYi in China. A security vulnerability exists in RuoYi v4.7.6 and earlier versions. An attacker can exploit this vulnerability to download arbitrary files from the server...

CVE-2023-27025: Download of Code Without Integrity Check

An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrary files in the server...

CVE-2023-27025

An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrary files in the server...