3250 matches found
Arbitrary File Download
mautic/core is vulnerable to arbitrary file download. An authenticated user is able to download arbitrary files from the server...
Xionghai CMS suffers from arbitrary file download vulnerability
Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. Xionghai CMS has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...
Simple Job Board < 2.9.4 - Authenticated Path Traversal Leading to Arbitrary File Download
The plugin does not validate the sjbfile parameter when viewing a resume, allowing authenticated user with the downloadresume capability such as HR users to download arbitrary files from the web-server via a path traversal attack The sjbfile parameter to use may depends on the configuration of th...
Simple Job Board < 2.9.4 - Authenticated Path Traversal Leading to Arbitrary File Download
The plugin does not validate the sjbfile parameter when viewing a resume, allowing authenticated user with the downloadresume capability such as HR users to download arbitrary files from the web-server via a path traversal attack PoC The sjbfile parameter to use may depends on the configuration o...
China Bidding Public Service Platform Limited Bidding and Tendering Public Service Platform has Arbitrary File Download Vulnerability
China Bidding Public Service Platform Co., Ltd. is a public service enterprise approved by the State Council and set up under the guidance and promotion of the National Development and Reform Commission, and jointly invested by eight enterprises led by China Bidding and Tendering Association. The...
Arbitrary File Download Vulnerability in the Collaboration Office System of Beijing Zhiyuan Internet Software Co.
Beijing Zhiyuan Internet Software Co., Ltd Zhiyuan Internet was founded in March 2002, is a technology enterprise integrating product design, research and development, sales and service. An arbitrary file download vulnerability exists in the collaborative office system of Beijing Zhiyuan Internet...
HGiga MailSherlock Arbitrary File Download Vulnerability
HGiga MailSherlock is an email archiving and auditing system that provides a complete email security solution. An arbitrary file download vulnerability exists in HGiga MailSherlock. The vulnerability stems from MailSherlock's View Source Code feature not validating specific characters. An attacke...
Arbitrary File Download Vulnerability in Ruoyi Management System
Ruoyi management system is a SpringBoot2.0 based on the use of Spring, MyBatis, Shiro rights management system . Ruoyi Management System has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...
CVE-2020-25850
The function, view the source code, of HGiga MailSherlock does not validate specific characters. Remote attackers can use this flaw to download arbitrary system files...
CVE-2020-25850 HGiga MailSherlock - Arbitrary File Download
The function, view the source code, of HGiga MailSherlock does not validate specific characters. Remote attackers can use this flaw to download arbitrary system files...
Hgiga MailSherlock 输入验证错误漏洞
HGiga MailSherlock is an email archiving and auditing system that provides a complete email security solution. An arbitrary file download vulnerability exists in HGiga MailSherlock. The vulnerability stems from MailSherlock's View Source Code feature not validating specific characters. An attacke...
Arbitrary File Download Vulnerability in MTCEO Repository System
MTCEO library system using php + mysql, built by thinkphp underlying , Baidu library template style for the basic style . MTCEO library system exists arbitrary file download vulnerability, attackers can use the vulnerability to obtain sensitive information...
Ship 100 online education system has an arbitrary file download vulnerability
Shipping 100 is a virtual goods automatic shipping system / article pay to read system, without human guards, customers can buy online to automatically complete the transaction. There is an arbitrary file download vulnerability in the Shipment 100 online education system. An attacker can exploit...
GateOne Arbitrary File Download Vulnerability
GateOne is a terminal emulator and SSH client based on HTML5 implementation. GateOne 1.1 suffers from an arbitrary file download vulnerability. An attacker can download arbitrary files via /downloads/... Directory traversal can be exploited to download arbitrary files...
Directory traversal
GateOne 1.1 allows arbitrary file download without authentication via /downloads/.. directory traversal because os.path.join is misused...
CVE-2020-35736
GateOne 1.1 allows arbitrary file download without authentication via /downloads/.. directory traversal because os.path.join is misused...
CVE-2020-35736
GateOne 1.1 allows arbitrary file download without authentication via /downloads/.. directory traversal because os.path.join is misused...
PT-2020-17408
Name of the Vulnerable Software and Affected Versions GateOne version 1.1 Description The issue allows arbitrary file download without authentication via "/downloads/.." directory traversal because os.path.join is misused. This can be exploited through the "/downloads/" API endpoint...
Liftoff GateOne 路径遍历漏洞
GateOne is a terminal emulator and SSH client based on HTML5 implementation. GateOne 1.1 suffers from an arbitrary file download vulnerability. An attacker can download arbitrary files via /downloads/... Directory traversal can be exploited to download arbitrary files...
CVE-2020-35736: Improper Limitation of a Pathname to a Restricted Directory
GateOne 1.1 allows arbitrary file download without authentication via /downloads/.. directory traversal because os.path.join is misused...