CVE-2017-18923

beroNet VoIP Gateways before 3.0.16 have a PHP script that allows downloading arbitrary files, including ones with credentials...

CVE-2017-18923

beroNet VoIP Gateways before 3.0.16 have a PHP script that allows downloading arbitrary files, including ones with credentials...

PT-2020-8468

Name of the Vulnerable Software and Affected Versions: beroNet VoIP Gateways versions prior to 3.0.16 Description: The issue allows downloading arbitrary files, including ones with credentials, due to a PHP script. Recommendations: For versions prior to 3.0.16, update to version 3.0.16 or later t...

CVE-2017-18923: Improper Neutralization of Special Elements in Output Used by a Downstream Component

beroNet VoIP Gateways before 3.0.16 have a PHP script that allows downloading arbitrary files, including ones with credentials...

Langfang Extreme Networks Technology Co., Ltd Extreme CMS has arbitrary file download vulnerability

Extreme CMS is an open source and free PHPCMS web content management system. Ltd Extreme CMS has an arbitrary file download vulnerability that can be exploited by an attacker to read any file in the system...

HelloWeb 2.0 - Arbitrary File Download Vulnerability

Exploit for asp platform in category web applications Exploit Title: HelloWeb 2.0 - Arbitrary File Download Vendor Homepage: https://helloweb.co.kr/ Version: 2.0 Latest and previous versions Exploit Author: bRpsd Contact Author: cyatlive.no Google Dork: inurl:exec/file/download.asp Type: WebApps ...

HelloWeb 2.0 Arbitrary File Download

Exploit Title: HelloWeb 2.0 - Arbitrary File Download Date: 2020-07-09 Vendor Homepage: https://helloweb.co.kr/ Version: 2.0 Latest and previous versions Exploit Author: bRpsd Contact Author: cyatlive.no Google Dork: inurl:exec/file/download.asp Type: WebApps / ASP...

HelloWeb 2.0 - Arbitrary File Download

Exploit Title: HelloWeb 2.0 - Arbitrary File Download Date: 2020-07-09 Vendor Homepage: https://helloweb.co.kr/ Version: 2.0 Latest and previous versions Exploit Author: bRpsd Contact Author: cyatlive.no Google Dork: inurl:exec/file/download.asp Type: WebApps / ASP...

Arbitrary file download vulnerability in Swordfish Forum

Swordfish Forum is a bbs forum system officially and publicly released by Catfish CMS. Swordfish Forum has an arbitrary file download vulnerability that can be exploited by attackers to download database backup files...

Security & Malware scan by CleanTalk < 2.51 - Security Nonce Leak leading to Unauthorised AJAX call

Security nonce leak, allowing any authenticated users such as subscribers to make unauthorised AJAX call which could lead to arbitrary file deletion/download and function call. Note WPScanTeam: We do not consider the issue fully remediated, as the AJAX calls rely on CSRF check for authorisation,...

CVE-2020-5356: Improper Authorization

Dell PowerProtect Data Manager PPDM versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines...

CVE-2020-15026

Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file download via backup/plugin.php...

CVE-2020-15026

Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file download via backup/plugin.php...

Directory traversal

Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file download via backup/plugin.php...

CVE-2020-15026

CVE-2020-15026 affects Bludit 3.12.0, where a directory traversal flaw in backup/plugin.php can be triggered via the /plugin-backup-download?file=../ parameter to enable arbitrary file download. The cited sources describe the vulnerability as a path traversal in the Bludit backup plugin, enabling...

CVE-2020-15026

Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file download via backup/plugin.php...

CVE-2020-15026

Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file download via backup/plugin.php...

PT-2020-14127

Name of the Vulnerable Software and Affected Versions Bludit version 3.12.0 Description The issue allows admins to use a directory traversal approach for arbitrary file download via the "backup/plugin.php" file. This can be achieved by exploiting the "/plugin-backup-download?file=../" endpoint...

CVE-2020-15026: Improper Limitation of a Pathname to a Restricted Directory

Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file download via backup/plugin.php...

Arbitrary File Download Vulnerability in Student Work Management Information System of Zhengfang Software Co.

The positive student work management information system, making full use of the human resources of the student work management department, through informationization, digitization, networked office on the students' learning, life, thinking and other aspects of the comprehensive management, to sol...