jizhi CMS 1.6.7 Arbitrary File Download

Exploit Title: jizhi CMS 1.6.7 - Arbitrary File Download Google Dork: jizhicms Date: 2020-04-18 Exploit Author: iej1ctk1g Vendor Homepage: https://www.jizhicms.cn/ Software Link: http://down.jizhicms.cn/jizhicmsBeta1.6.7.zip Version: 1.6.7 Tested on： Mac OS CVE : N/A Data 1. POST...

CVE-2020-4430

IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to download arbitrary files from the system. IBM X-Force ID: 180535. Recent assessments: Assessed Attacker...

IBM Data Risk Manager Arbitrary File Download

IBM Data Risk Manager IDRM contains two vulnerabilities that can be chained by an unauthenticated attacker to download arbitrary files off the system. The first is an unauthenticated bypass, followed by a path traversal. This module exploits both vulnerabilities, giving an attacker the ability to...

jizhi CMS 1.6.7 - Arbitrary File Download

Exploit Title: jizhi CMS 1.6.7 - Arbitrary File Download Google Dork: jizhicms Date: 2020-04-18 Exploit Author: iej1ctk1g Vendor Homepage: https://www.jizhicms.cn/ Software Link: http://down.jizhicms.cn/jizhicmsBeta1.6.7.zip Version: 1.6.7 Tested on： Mac OS CVE : N/A Data 1. POST...

Arbitrary File Download Vulnerability in EcoTimes.com Enterprise Online Bookkeeping Management System

EcoTimes.com Business Online Bookkeeping Management System is a commercial system. There is an arbitrary file download vulnerability that can be exploited by an attacker to download arbitrary files...

CVE-2019-11999

Potential security vulnerabilities have been identified in HPE OpenCall Media Platform OCMP resulting in remote arbitrary file download and cross site scripting. HPE has made the following updates available to resolve the vulnerability in the impacted versions of OCMP. For OCMP version 4.4.X -...

Cross site scripting

Potential security vulnerabilities have been identified in HPE OpenCall Media Platform OCMP resulting in remote arbitrary file download and cross site scripting. HPE has made the following updates available to resolve the vulnerability in the impacted versions of OCMP. For OCMP version 4.4.X -...

CVE-2019-11999

Potential security vulnerabilities have been identified in HPE OpenCall Media Platform OCMP resulting in remote arbitrary file download and cross site scripting. HPE has made the following updates available to resolve the vulnerability in the impacted versions of OCMP. For OCMP version 4.4.X -...

CVE-2019-11999

CVE-2019-11999 concerns HPE OpenCall Media Platform (OCMP). Public docs describe a vulnerability in OCMP versions 4.4.x prior to 4.4.8 and 4.5.x prior to an updated release, enabling remote arbitrary file download and cross-site scripting due to insufficient input validation. The described fixes ...

WeLive online customer service system suffers from arbitrary file download vulnerability

WeLive online customer service system is a small program, easy to install and use online online customer service system. WeLive Online Customer Service System has an arbitrary file download vulnerability that can be exploited by an attacker to obtain sensitive information...

PT-2020-9233

Name of the Vulnerable Software and Affected Versions HPE OpenCall Media Platform OCMP versions 4.4.X through 4.4.7 HPE OpenCall Media Platform OCMP version 4.5.x Description Potential security vulnerabilities have been identified in HPE OpenCall Media Platform OCMP resulting in remote arbitrary...

CVE-2019-11999: Improper Neutralization of Input During Web Page Generation

Potential security vulnerabilities have been identified in HPE OpenCall Media Platform OCMP resulting in remote arbitrary file download and cross site scripting. HPE has made the following updates available to resolve the vulnerability in the impacted versions of OCMP. For OCMP version 4.4.X -...

xyhcms background exists arbitrary file download vulnerability

xyhcms is a completely open source CMS content management system, simple, easy to use, secure, stable and free. xyhcms background arbitrary file download vulnerability , attackers can exploit the vulnerability to download sensitive system files...

Arbitrary File Download Vulnerability in WMCMS

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS arbitrary file download vulnerability, attackers can use the vulnerability to download sensitive files under the server...

Arbitrary File Download Vulnerability in WMCMS

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS has an arbitrary file download vulnerability that can be exploited by attackers to download sensitive server files...

Arbitrary File Download Vulnerability in Feifei Movie Navigation System

Fei Fei Movie Navigation System is developed by PHP+Mysql technology, which can run on windows and Linux system platform. An arbitrary file download vulnerability exists in Feifei Movie & TV Navigation System, which can be exploited by attackers to compromise confidentiality...

Arbitrary File Download Vulnerability in TrueCMS

TrueCMS is a website management system. TrueCMS suffers from an arbitrary file download vulnerability, which can be exploited by an attacker to download arbitrary files from the server and disclose sensitive information...

LimeSurvey 4.1.11 Path Traversal

Exploit Title: LimeSurvey 4.1.11 - 'File Manager' Path Traversal Date: 2020-04-02 Exploit Author: Matthew Aberegg, Michael Burkey Vendor Homepage: https://www.limesurvey.org Version: LimeSurvey 4.1.11+200316 Tested on: Ubuntu 18.04.4 CVE : CVE-2020-11455 Vulnerability Details Description : A path...

Jinfornet Jreport 15.6 Directory Traversal

Exploit Title: Jinfornet Jreport 15.6 - Unauthenticated Directory Traversal Date: 2020-03-26 Exploit Author: hongphukt Vendor Homepage: https://www.jinfonet.com/ Software Link: https://www.jinfonet.com/product/download-jreport/ Version: JReport 15.6 Tested on: Linux, Windows Jreport Help function...

Jinfornet Jreport 15.6 - Unauthenticated Directory Traversal

Jinfornet Jreport 15.6 - Unauthenticated Directory Traversal Exploit Title: Jinfornet Jreport 15.6 - Unauthenticated Directory Traversal Date: 2020-03-26 Exploit Author: hongphukt Vendor Homepage: https://www.jinfonet.com/ Software Link: https://www.jinfonet.com/product/download-jreport/ Version:...