Arbitrary File Download Vulnerability in Hangzhou Yingfeng Software Co.

Hangzhou Yingfeng Software Co., Ltd. was registered on February 10, 2006 in Hangzhou City Market Supervision Administration. Legal representative Zhang Yongqing, the company's business scope includes general business items: services: computer hardware and software technology development, etc...

Huawei-China Telecom GPON/EPON Routing All-in-One Machine Exploits Arbitrary File Download Vulnerability

Founded in 1987, Huawei is a provider of ICT information and communications infrastructure and smart terminals. An arbitrary file download vulnerability exists in the Huawei - China Telecom GPON/EPON Routing All-in-One. An attacker can exploit the vulnerability to obtain sensitive information...

Arbitrary File Download

mautic/core is vulnerable to arbitrary file download. An authenticated user is able to download arbitrary files from the server...

Xionghai CMS suffers from arbitrary file download vulnerability

Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. Xionghai CMS has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

Simple Job Board < 2.9.4 - Authenticated Path Traversal Leading to Arbitrary File Download

The plugin does not validate the sjbfile parameter when viewing a resume, allowing authenticated user with the downloadresume capability such as HR users to download arbitrary files from the web-server via a path traversal attack PoC The sjbfile parameter to use may depends on the configuration o...

Simple Job Board < 2.9.4 - Authenticated Path Traversal Leading to Arbitrary File Download

The plugin does not validate the sjbfile parameter when viewing a resume, allowing authenticated user with the downloadresume capability such as HR users to download arbitrary files from the web-server via a path traversal attack The sjbfile parameter to use may depends on the configuration of th...

China Bidding Public Service Platform Limited Bidding and Tendering Public Service Platform has Arbitrary File Download Vulnerability

China Bidding Public Service Platform Co., Ltd. is a public service enterprise approved by the State Council and set up under the guidance and promotion of the National Development and Reform Commission, and jointly invested by eight enterprises led by China Bidding and Tendering Association. The...

Arbitrary File Download Vulnerability in the Collaboration Office System of Beijing Zhiyuan Internet Software Co.

Beijing Zhiyuan Internet Software Co., Ltd Zhiyuan Internet was founded in March 2002, is a technology enterprise integrating product design, research and development, sales and service. An arbitrary file download vulnerability exists in the collaborative office system of Beijing Zhiyuan Internet...

HGiga MailSherlock Arbitrary File Download Vulnerability

HGiga MailSherlock is an email archiving and auditing system that provides a complete email security solution. An arbitrary file download vulnerability exists in HGiga MailSherlock. The vulnerability stems from MailSherlock's View Source Code feature not validating specific characters. An attacke...

Arbitrary File Download Vulnerability in Ruoyi Management System

Ruoyi management system is a SpringBoot2.0 based on the use of Spring, MyBatis, Shiro rights management system . Ruoyi Management System has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2020-25850

The function, view the source code, of HGiga MailSherlock does not validate specific characters. Remote attackers can use this flaw to download arbitrary system files...

CVE-2020-25850 HGiga MailSherlock - Arbitrary File Download

The function, view the source code, of HGiga MailSherlock does not validate specific characters. Remote attackers can use this flaw to download arbitrary system files...

Hgiga MailSherlock 输入验证错误漏洞

HGiga MailSherlock is an email archiving and auditing system that provides a complete email security solution. An arbitrary file download vulnerability exists in HGiga MailSherlock. The vulnerability stems from MailSherlock's View Source Code feature not validating specific characters. An attacke...

Arbitrary File Download Vulnerability in MTCEO Repository System

MTCEO library system using php + mysql, built by thinkphp underlying , Baidu library template style for the basic style . MTCEO library system exists arbitrary file download vulnerability, attackers can use the vulnerability to obtain sensitive information...

Ship 100 online education system has an arbitrary file download vulnerability

Shipping 100 is a virtual goods automatic shipping system / article pay to read system, without human guards, customers can buy online to automatically complete the transaction. There is an arbitrary file download vulnerability in the Shipment 100 online education system. An attacker can exploit...

GateOne Arbitrary File Download Vulnerability

GateOne is a terminal emulator and SSH client based on HTML5 implementation. GateOne 1.1 suffers from an arbitrary file download vulnerability. An attacker can download arbitrary files via /downloads/... Directory traversal can be exploited to download arbitrary files...

Directory traversal

GateOne 1.1 allows arbitrary file download without authentication via /downloads/.. directory traversal because os.path.join is misused...

CVE-2020-35736

GateOne 1.1 allows arbitrary file download without authentication via /downloads/.. directory traversal because os.path.join is misused...

Liftoff GateOne 路径遍历漏洞

GateOne is a terminal emulator and SSH client based on HTML5 implementation. GateOne 1.1 suffers from an arbitrary file download vulnerability. An attacker can download arbitrary files via /downloads/... Directory traversal can be exploited to download arbitrary files...

Arbitrary File Download Vulnerability in EAP Enterprise Adaptation Management Platform

Ltd. launched a digital intelligent operation management platform, through data governance, modeling analysis and other means to help operators achieve operation monitoring, measurement and analysis, prediction and early warning and other decision-making intelligent assistance, a total of more th...