Cisco Data Center Network Manager Arbitrary File Download Vulnerability

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. An arbitrary file download vulnerability exists in the web-based management...

GrandNode 4.40 - Path Traversal / Arbitrary File Download Vulnerabilities

Exploit for multiple platform in category web applications Exploit Title: GrandNode Path Traversal & Arbitrary File Download Unauthenticated Exploit Author: Corey Robinson https://twitter.com/CRobSec Vendor Homepage: https://grandnode.com/ Software Link:...

GrandNode 4.40 - Path Traversal Arbitrary File Download

GrandNode 4.40 - Path Traversal Arbitrary File Download Exploit Title: GrandNode Path Traversal & Arbitrary File Download Unauthenticated Date: 06/23/3019 Exploit Author: Corey Robinson https://twitter.com/CRobSec Vendor Homepage: https://grandnode.com/ Software Link:...

GrandNode 4.40 Path Traversal / File Download

Exploit Title: GrandNode Path Traversal & Arbitrary File Download Unauthenticated Date: 06/23/3019 Exploit Author: Corey Robinson https://twitter.com/CRobSec Vendor Homepage: https://grandnode.com/ Software Link:...

CVE-2019-3737

Dell EMC Avamar ADMe Web Interface 1.0.50 and 1.0.51 are affected by an LFI vulnerability which may allow a malicious user to download arbitrary files from the affected system by sending a specially crafted request to the Web Interface application...

CVE-2019-3737 Dell EMC Avamar Security Update for ADMe Web UI Vulnerability

Dell EMC Avamar ADMe Web Interface 1.0.50 and 1.0.51 are affected by an LFI vulnerability which may allow a malicious user to download arbitrary files from the affected system by sending a specially crafted request to the Web Interface application...

S-CMS Enterprise Website Builder System has Arbitrary File Download Vulnerability

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS enterprise website building system PHP version v3.0 version of the existence of arbitrary file download vulnerability, logging...

Oracle Application Testing Suite DownloadServlet Directory Traversal (CVE-2019-2557)

A directory traversal vulnerability exists in Oracle Application Testing Suite. A remote authenticated attacker can exploit this vulnerability by sending a malicious request to the vulnerable server. Successful exploitation results in arbitrary file download from the target server...

WordPress Simple File List plugin <= 3.2.4 - Unauthenticated Arbitrary File Download vulnerability

Unauthenticated Arbitrary File Download vulnerability found by Admavidhya N in WordPress Simple File List plugin versions = 3.2.4. Solution Update the WordPress Simple File List plugin to the latest available version at least 3.2.5...

Xiamen Weipin Network Technology Co., Ltd. website building system suffers from arbitrary file download vulnerability

Xiamen Weipin Network Technology Co., Ltd. is a company specializing in website construction, website planning, web design, mobile site construction, website revision, website maintenance, website hosting, Internet marketing, domain name hosting and other integrated Internet services. Xiamen Weip...

Simple File List Plugin <= 3.2.4 - Unauthenticated Arbitrary File Download

This vulnerability allows any user to download sensitive information by traversing the path Authentication required: NO...

CVE-2017-12761

http://codecanyon.net/user/Endober WebFile Explorer 1.0 is affected by: SQL Injection. The impact is: Arbitrary File Download remote. The component is: $file = $GET'id' in download.php. The attack vector is:...

CVE-2017-12761

http://codecanyon.net/user/Endober WebFile Explorer 1.0 is affected by: SQL Injection. The impact is: Arbitrary File Download remote. The component is: $file = $GET'id' in download.php. The attack vector is:...

CVE-2017-12761

http://codecanyon.net/user/Endober WebFile Explorer 1.0 is affected by: SQL Injection. The impact is: Arbitrary File Download remote. The component is: $file = $GET'id' in download.php. The attack vector is:...

Sql injection

http://codecanyon.net/user/Endober WebFile Explorer 1.0 is affected by: SQL Injection. The impact is: Arbitrary File Download remote. The component is: $file = $GET'id' in download.php. The attack vector is:...

CVE-2017-12761

CVE-2017-12761 affects WebFile Explorer 1.0. The vulnerability arises from using the GET parameter in download.php (component: $file = $_GET['id']), enabling SQL Injection that leads to Arbitrary File Download (remote) via the attack vector download.php?id=WebExplorer/../config.php. Affected soft...

CVE-2017-12761

http://codecanyon.net/user/Endober WebFile Explorer 1.0 is affected by: SQL Injection. The impact is: Arbitrary File Download remote. The component is: $file = $GET'id' in download.php. The attack vector is:...

Aiwo Real Estate System v4.7 has Arbitrary File Download Vulnerability

Sticky Cat is an extremely light, minimalist general-purpose PHP website system. Aiwo Real Estate System v4.7 has an arbitrary file download vulnerability that can be exploited by attackers to download arbitrary files...

Joomla JiFile 2.3.1 Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JiFile 2.3.1 - Arbitrary File Download Exploit Author: Mr Winst0n Author E-mail: email protected Vendor Homepage: http://www.isapp.it Software Link :...

Joomla! Component JiFile 2.3.1 - Arbitrary File Download

Exploit Title: Joomla! Component JiFile 2.3.1 - Arbitrary File Download Exploit Author: Mr Winst0n Author E-mail: [email protected] Discovery Date: April 28, 2019 Vendor Homepage: http://www.isapp.it Software Link :...