CVE-2019-13408

A relative path traversal vulnerability found in Advan VD-1 firmware versions up to 230. It allows attackers to download arbitrary files via url cgibin/ExportSettings.cgi?Download=filepath, without any authentication...

CVE-2019-3967

CVE-2019-3967 affects OpenEMR 5.0.1 and earlier, where the patient file download interface contains a directory traversal flaw allowing authenticated attackers to download arbitrary files from the host system. The connected Red Hat and CNVD entries corroborate the affected product/version and the...

Arbitrary File Downloading Vulnerability in Xianqi Kindergarten Online Management System

Shanxi Xianqi Technology Co., Ltd. is a high-tech enterprise integrating research and development, production, sales and service of hardware and software. There is an arbitrary file download vulnerability in the online kindergarten management system, through which an attacker can download any fil...

Joomla JS Support Ticket Component (com_jssupportticket) 1.1.5 - Arbitrary File Download Vulnerabili

Exploit for php platform in category web applications Exploit Title: Joomla! component comjssupportticket - Arbitrary File Download Dork: inurl:"index.php?option=comjssupportticket" Exploit Author: qw3rTyTy Vendor Homepage: http://joomsky.com/ Software Link:...

Joomla! Component JS Support Ticket (component com_jssupportticket) 1.1.5 - Arbitrary File Download

Joomla! Component JS Support Ticket component comjssupportticket 1.1.5 - Arbitrary File Download Exploit Title: Joomla! component comjssupportticket - Arbitrary File Download Dork: inurl:"index.php?option=comjssupportticket" Date: 08.08.19 Exploit Author: qw3rTyTy Vendor Homepage:...

Joomla! Component JS Support Ticket (component com_jssupportticket) 1.1.5 - Arbitrary File Download

Exploit Title: Joomla! component comjssupportticket - Arbitrary File Download Dork: inurl:"index.php?option=comjssupportticket" Date: 08.08.19 Exploit Author: qw3rTyTy Vendor Homepage: http://joomsky.com/ Software Link: https://www.joomsky.com/46/download/1.html Version: 1.1.5 Tested on:...

Joomla JS Support Ticket 1.1.5 Arbitrary File Download

Exploit Title: Joomla! component comjssupportticket - Arbitrary File Download Dork: inurl:"index.php?option=comjssupportticket" Date: 08.08.19 Exploit Author: qw3rTyTy Vendor Homepage: http://joomsky.com/ Software Link: https://www.joomsky.com/46/download/1.html Version: 1.1.5 Tested on:...

Arbitrary File Download Vulnerability in Zhiyuan OA

Zhiyuan OA is an office system developed by Beijing Zhiyuan Internet Software Co. There is an arbitrary file download vulnerability in Zhiyuan OA, which can be exploited by attackers to download arbitrary files and obtain sensitive information...

OpenEMR < 5.0.2 Multiple Vulnerabilities

OpenEMR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:open-emr:openemr"; ifdescription...

Arbitrary File Download Vulnerability in Panavision OA

Panavision OA Office System is a coordination office software. An arbitrary file download vulnerability exists in Panmicro OA, which can be exploited by attackers to obtain sensitive information...

Ctcms v2.0.2 Arbitrary File Download Vulnerability

Ctcms video system Ctcms video system is a PHP + Mysql development of video management system. Ctcms v2.0.2 has an arbitrary file download vulnerability that can be exploited by attackers to download arbitrary files and obtain sensitive information...

Arbitrary File Download Vulnerability in Isthmus Electronic Document Security Management System (CNVD-2019-27482)

Electronic document security management system abbreviation: CDG is an electronic document security protection software. An arbitrary file read vulnerability exists in the IZP Electronic Document Security Management System. The download function somewhere in Yisetong Electronic Document Security...

Arbitrary File Download Vulnerability in StarNet Ruijie Multimedia Conference System BMS

Fujian StarNet Ruijie Communication Co., Ltd. is an ICT application solution provider. An arbitrary file download vulnerability exists in the StarNet Ruijie Multimedia Conference System BMS. An attacker can exploit the vulnerability to download other files, such as a configuration file containing...

ArtCMS V9.2 suffers from arbitrary file download vulnerability

ArtCMS is a website management system. ArtCMS V9.2 suffers from an arbitrary file download vulnerability. An attacker can exploit the vulnerability to download arbitrary files...

Arbitrary File Download Vulnerability in Sida Fluoroplastics Co.

Remote server WEB service does not do suffix filtering and directory control on user-submitted download files, leading to malicious attackers to construct paths to download arbitrary server files. http://60.191.211.210:8088/yyoa/DownExcelBeanServlet?contenttype=username&contentvalue=&state=1&peri...

Cisco Data Center Network Manager Arbitrary File Download Vulnerability

According to its self-reported version, Cisco Data Center Network Manager is affected by an arbitrary file download vulnerability in the web-based management interface. An unauthenticated, remote attacker can exploit this, to download arbitrary files and disclose sensitive information. Please see...

CVE-2019-9886

Any URLs with downloadattachment.php under templates or home folders can allow arbitrary files downloaded without login in BroadLearning eClass before version ip.2.5.10.2.1...

Dell EMC Avamar ADMe Local File Inclusion Vulnerability

Dell EMC Avamar is a suite of fully virtualized backup and recovery software for servers. A local file inclusion vulnerability exists in the Web Interface in Dell EMC Avamar ADMe versions 1.0.50 and 1.0.51. An attacker could exploit this vulnerability by sending a specially crafted request to...

CVE-2019-1621

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to gain access to sensitive files on an affected device. The vulnerability is due to incorrect permissions settings on affected DCNM software. An attacke...

CVE-2019-1621 Cisco Data Center Network Manager Arbitrary File Download Vulnerability

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to gain access to sensitive files on an affected device. The vulnerability is due to incorrect permissions settings on affected DCNM software. An attacke...