PT-2022-17079

Name of the Vulnerable Software and Affected Versions HorizontCMS version 1.0.0-beta.2 Description The issue allows for an arbitrary file download via the /admin/file-manager/ component. Recommendations For version 1.0.0-beta.2, consider restricting access to the /admin/file-manager/ component...

WordPress Download Monitor Plugin < 4.4.7 Multiple Vulnerabilities

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

CVE-2021-25004

The SEUR Oficial WordPress plugin before 1.7.2 creates a PHP file with a random name when installed, even though it is used for support purposes, it allows to download any file from the web server without restriction after knowing the URL and a password than an administrator can see in the plugin...

CVE-2021-25004 SEUR Oficial < 1.7.2 - Admin+ Arbitrary File Download

The SEUR Oficial WordPress plugin before 1.7.2 creates a PHP file with a random name when installed, even though it is used for support purposes, it allows to download any file from the web server without restriction after knowing the URL and a password than an administrator can see in the plugin...

CVE-2021-29395

Directory travesal in /northstar/filemanager/download.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to download arbitrary files, including JSP source code, across the filesystem of the host of the web application...

CVE-2021-44983

In taocms 3.0.1 after logging in to the background, there is an Arbitrary file download vulnerability at the File Management column...

CVE-2021-44983

In taocms 3.0.1 after logging in to the background, there is an Arbitrary file download vulnerability at the File Management column...

CVE-2021-44983

In taocms 3.0.1 after logging in to the background, there is an Arbitrary file download vulnerability at the File Management column...

CVE-2021-44983

In taocms 3.0.1 after logging in to the background, there is an Arbitrary file download vulnerability at the File Management column...

CVE-2021-44983

CVE-2021-44983 concerns taocms 3.0.1, where after login to the backend there is an Arbitrary file download vulnerability in the File Management area. Connected documents corroborate the affected product/version and the vulnerability class but do not provide deeper root-cause analysis, exploit spe...

PT-2022-12280

Name of the Vulnerable Software and Affected Versions taocms version 3.0.1 Description The issue is related to an Arbitrary file download vulnerability. It occurs after logging in to the background, specifically at the File Management column. Recommendations For taocms version 3.0.1, consider...

CVE-2021-44983: Files or Directories Accessible to External Parties

In taocms 3.0.1 after logging in to the background, there is an Arbitrary file download vulnerability at the File Management column...

taocms 安全漏洞

Taocms is a micro Cms Content Management System in China. TaoCMS has an arbitrary file download vulnerability, no details of the vulnerability are provided at this time...

CVE-2021-29395: Improper Limitation of a Pathname to a Restricted Directory

Directory travesal in /northstar/filemanager/download.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to download arbitrary files, including JSP source code, across the filesystem of the host of the web application...

PT-2022-9921

Name of the Vulnerable Software and Affected Versions NorthStar Club Management version 6.3 Description The issue allows remote unauthenticated users to download arbitrary files, including JSP source code, across the filesystem of the host of the web application due to directory traversal in the...

CVE-2021-31567

Authenticated admin+ Arbitrary File Download vulnerability discovered in Download Monitor WordPress plugin versions = 4.4.6. The plugin allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the &downloadablefileurls0 parameter data. It's also...

CVE-2021-31567 WordPress Download Monitor plugin <= 4.4.6 - Authenticated Arbitrary File Download vulnerability

Authenticated admin+ Arbitrary File Download vulnerability discovered in Download Monitor WordPress plugin versions = 4.4.6. The plugin allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the &downloadablefileurls0 parameter data. It's also...

PT-2022-10037

Name of the Vulnerable Software and Affected Versions Download Monitor WordPress plugin versions = 4.4.6 Description The issue allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the downloadable file urls0 parameter data. It is also possibl...

WordPress Download Monitor 信息泄露漏洞

WordPress is a blogging platform developed using the PHP language. File Upload is a file upload plugin used in it. WordPress plugin is an application plugin. WordPress Download Monitor plugin version 4.4.6 and previous versions are vulnerable to arbitrary file download. stems from the fact that t...

CVE-2021-31567: Exposure of Sensitive Information to an Unauthorized Actor

Authenticated admin+ Arbitrary File Download vulnerability discovered in Download Monitor WordPress plugin versions = 4.4.6. The plugin allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the &downloadablefileurls0 parameter data. It's also...