PT-2018-18095 · Joomla · K2

Name of the Vulnerable Software and Affected Versions: K2 component for Joomla! version 2.8.0 Description: The issue allows an attacker to download arbitrary files due to Incorrect Access Control with directory traversal. This can be demonstrated by a request to...

Joomla! K2 2.8.0 Arbitrary File Download

Exploit Title: Joomla! Component K2 2.8.0 - Arbitrary File Download Dork: N/A Date: 26.02.2018 Vendor Homepage: http://www.joomlaworks.net/ Software Link: https://extensions.joomla.org/extensions/extension/authoring-a-content/content-construction/k2/ Software Download:...

Joomla K2 2.8.0 Component - Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component K2 2.8.0 - Arbitrary File Download Dork: N/A Date: 26.02.2018 Vendor Homepage: http://www.joomlaworks.net/ Software Link:...

Joomla! Component K2 2.8.0 - Arbitrary File Download

Joomla! Component K2 2.8.0 - Arbitrary File Download. CVE-2018-7482. Webapps exploit for PHP platform Exploit Title: Joomla! Component K2 2.8.0 - Arbitrary File Download Dork: N/A Date: 26.02.2018 Vendor Homepage: http://www.joomlaworks.net/ Software Link:...

Joomla com_jtagmembersdirectory Component Arbitrary File Download (CVE-2018-6008)

An Arbitrary File Download vulnerability exists in Joomla comjtagmembersdirectory Component. Successful exploitation of this vulnerability would allow a remote attacker to download arbitrary files from affected system...

CVE-2017-5794

HPE Intelligent Management Center (IMC) PLAT 7.2 E0403P06: FileUploadServlet is vulnerable to directory traversal due to improper input validation in multipart form-data requests, enabling remote code execution with SYSTEM privileges (authentication may be bypassed).

CVE-2017-5795

CVE-2017-5795 affects HPE Intelligent Management Center (IMC) PLAT 7.2 E0403P06. The vulnerability resides in FileDownloadServlet, where insufficient validation/sanitization of the fileName parameter allows directory traversal, enabling remote disclosure of arbitrary files. ZDI notes that exploit...

CVE-2017-5794

A Remote Arbitrary File Download vulnerability in HPE Intelligent Management Center IMC PLAT version 7.2 E0403P06 was found...

CVE-2017-12555

CVE-2017-12555 affects HPE Intelligent Management Center (iMC) SOM version IMC SOM 7.3 E0501. A remote attacker can download arbitrary files and disclose information due to a vulnerability in iMC SOM. Connected sources corroborate the issue across NVD and CNVD entries and related vulnerability no...

Arbitrary file download vulnerability in phpwechat version 1.1.6

phpWechat is a free and open source microsoft public platform management system. An arbitrary file download vulnerability exists in phpwechat version 1.1.6 at the data backup, which can be exploited by an attacker to download arbitrary files from the server, such as script code, service and syste...

Weak password, arbitrary file download vulnerability in Byzoro PatrolFlow-AM series security gateway

PatrolFlow-AM series products are high-performance application-delivery Internet behavior management devices launched by Byzoro Networks to meet the needs of Internet access users in the areas of information content security, regulation of online behavior, utilization of network resources,...

Jtag Members Directory Arbitrary File Download Vulnerability

Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other features . Jtag Members Directory is used in one of the member management plug-ins. An arbitrary file download vulnerability exists in...

Arbitrary File Download Vulnerability in CAJViewer, a Specialized Reader for China Knowledge Network (CNN)

CAJViewer is a series of CAJViewer products of National Engineering Research Center of CD-ROM and Tsinghua Tongfang Knowledge Network Beijing Technology Co., Ltd. and a special full-text format viewer for China Periodicals Network CJN, which supports TEB, CAJ, NH, KDH, and PDF format files of CJN...

CVE-2018-6008

Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the downloadfile parameter...

CVE-2018-6008

Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the downloadfile parameter...

Design/Logic Flaw

Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the downloadfile parameter...

CVE-2018-6008

Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the downloadfile parameter...

CVE-2018-6008

Affected software : Joomla! Jtag Members Directory 5.3.7. Vulnerability : Local File Inclusion via the download_file parameter, enabling arbitrary file download. Root cause : improper handling of input in the component leading to LFI. Impact : potential unauthorized access to sensitive server fil...

Joomla! Component Jtag Members Directory 5.3.7 - Arbitrary File Download

Exploit Title: Joomla! Component Jtag Members Directory 5.3.7 - Arbitrary File Download Dork: N/A Date: 27.01.2018 Vendor Homepage: https://joomlatag.com/ Software Link: https://extensions.joomla.org/extensions/extension/clients-a-communities/members-lists/jtag-members-directory/ Version: 5.3.7...

Joomla Jtag Members Directory 5.3.7 Component - Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Jtag Members Directory 5.3.7 - Arbitrary File Download Dork: N/A Date: 27.01.2018 Vendor Homepage: https://joomlatag.com/ Software Link:...