Arbitrary File Download Vulnerability in Website Building System of Shanghai Baoxin Software Co.

Shanghai Baoshin Software Co., Ltd Baoshin Software for short is a listed software enterprise actually controlled by China Baowu and held by Baosteel. Shanghai Baoshin Software Co., Ltd. website building system has an arbitrary file download vulnerability, which can be exploited by an attacker to...

ESPCMS suffers from an arbitrary file download vulnerability (CNVD-2020-29422)

ESPCMS is a content management system CMS based on PHP and MySQL. ESPCMS has an arbitrary file download vulnerability that can be exploited by an attacker to download arbitrary files...

Arbitrary File Download Vulnerability in Surplus Visual Recording and Broadcasting System

Guangzhou Ncast Electronic Technology Co., Ltd hereinafter referred to as Ncast, founded in 2007, is a high-tech enterprise focusing on three major fields of multimedia communication, video and audio coding and decoding, and intelligent image processing. Ncast's recording and broadcasting system...

Arbitrary File Download Vulnerability in Education Resources Cloud Platform

Guangzhou Ncast Electronic Technology Co., Ltd hereinafter referred to as Ncast, founded in 2007, is a high-tech enterprise focusing on three major fields of multimedia communication, video and audio coding and decoding, and intelligent image processing. An arbitrary file download vulnerability...

RCE Exploit Released for IBM Data Risk Manager

UPDATED Four serious security vulnerabilities in the IBM Data Risk Manager IDRM have been identified that can lead to unauthenticated remote code execution RCE as root in vulnerable versions, according to analysis – and a proof-of-concept exploit is available. IBM weighed in on the problem this...

Researcher Discloses 4 Zero-Day Bugs in IBM's Enterprise Security Software

A cybersecurity researcher today publicly disclosed technical details and PoC for 4 unpatched zero-day vulnerabilities affecting an enterprise security software offered by IBM after the company refused to acknowledge the responsibly submitted disclosure. The affected premium product in question i...

IBM Data Risk Manager Arbitrary File Download

IBM Data Risk Manager IDRM contains two vulnerabilities that can be chained by an unauthenticated attacker to download arbitrary files off the system. The first is an unauthenticated bypass, followed by a path traversal. This module exploits both vulnerabilities, giving an attacker the ability to...

jizhi CMS 1.6.7 Arbitrary File Download

Exploit Title: jizhi CMS 1.6.7 - Arbitrary File Download Google Dork: jizhicms Date: 2020-04-18 Exploit Author: iej1ctk1g Vendor Homepage: https://www.jizhicms.cn/ Software Link: http://down.jizhicms.cn/jizhicmsBeta1.6.7.zip Version: 1.6.7 Tested on： Mac OS CVE : N/A Data 1. POST...

CVE-2020-4430

IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to download arbitrary files from the system. IBM X-Force ID: 180535. Recent assessments: Assessed Attacker...

jizhi CMS 1.6.7 - Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: jizhi CMS 1.6.7 - Arbitrary File Download Google Dork: jizhicms Exploit Author: iej1ctk1g Vendor Homepage: https://www.jizhicms.cn/ Software Link: http://down.jizhicms.cn/jizhicmsBeta1.6.7.zip Version: 1.6.7 Tested on： Mac OS CV...

jizhi CMS 1.6.7 - Arbitrary File Download

Exploit Title: jizhi CMS 1.6.7 - Arbitrary File Download Google Dork: jizhicms Date: 2020-04-18 Exploit Author: iej1ctk1g Vendor Homepage: https://www.jizhicms.cn/ Software Link: http://down.jizhicms.cn/jizhicmsBeta1.6.7.zip Version: 1.6.7 Tested on： Mac OS CVE : N/A Data 1. POST...

Arbitrary File Download Vulnerability in EcoTimes.com Enterprise Online Bookkeeping Management System

EcoTimes.com Business Online Bookkeeping Management System is a commercial system. There is an arbitrary file download vulnerability that can be exploited by an attacker to download arbitrary files...

CVE-2019-11999

Potential security vulnerabilities have been identified in HPE OpenCall Media Platform OCMP resulting in remote arbitrary file download and cross site scripting. HPE has made the following updates available to resolve the vulnerability in the impacted versions of OCMP. For OCMP version 4.4.X -...

Cross site scripting

Potential security vulnerabilities have been identified in HPE OpenCall Media Platform OCMP resulting in remote arbitrary file download and cross site scripting. HPE has made the following updates available to resolve the vulnerability in the impacted versions of OCMP. For OCMP version 4.4.X -...

CVE-2019-11999

CVE-2019-11999 concerns HPE OpenCall Media Platform (OCMP). Public docs describe a vulnerability in OCMP versions 4.4.x prior to 4.4.8 and 4.5.x prior to an updated release, enabling remote arbitrary file download and cross-site scripting due to insufficient input validation. The described fixes ...

CVE-2019-11999

Potential security vulnerabilities have been identified in HPE OpenCall Media Platform OCMP resulting in remote arbitrary file download and cross site scripting. HPE has made the following updates available to resolve the vulnerability in the impacted versions of OCMP. For OCMP version 4.4.X -...

WeLive online customer service system suffers from arbitrary file download vulnerability

WeLive online customer service system is a small program, easy to install and use online online customer service system. WeLive Online Customer Service System has an arbitrary file download vulnerability that can be exploited by an attacker to obtain sensitive information...

Arbitrary File Download Vulnerability in WMCMS

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS has an arbitrary file download vulnerability that can be exploited by attackers to download sensitive server files...

Arbitrary File Download Vulnerability in WMCMS

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS arbitrary file download vulnerability, attackers can use the vulnerability to download sensitive files under the server...

xyhcms background exists arbitrary file download vulnerability

xyhcms is a completely open source CMS content management system, simple, easy to use, secure, stable and free. xyhcms background arbitrary file download vulnerability , attackers can exploit the vulnerability to download sensitive system files...