DzzOffice v1.3.1 Arbitrary File Download Vulnerability in Frontend

DzzOffice is a cloud storage management tool , based on the free open source release , can be used as a personal network disk , team , enterprise network disk for use . DzzOffice v1.3.1 front-end arbitrary file download vulnerability exists due to the program fails to share path parameter for...

Arbitrary File Download Vulnerability in MS-MCMS Frontend of MDFMS Platform

MS-MCMS is a web management system using pure java development. A java + spring + mybatis web site building system developed by Mingfei Technology Co. MS-MCMS v4.6.0 version of the MS platform exists arbitrary file download vulnerability in the foreground , due to the system failed to...

WordPress WP Hide And Security Enhancer Plugin Arbitrary File Download

An arbitrary file download vulnerability exists in Wordpress WP Hide & Security Enhancer Plugin. Successful exploitation of this vulnerability by sending a specially crafted HTTP request would allow a remote attacker to gain access to arbitrary files...

Arbitrary File Download Vulnerability in Principal Century NSAE Application Security Gateway

NSAE Application Security Gateway is a hardware device independently developed by Principal Century to provide security proxy services for application systems. An arbitrary file download vulnerability exists in NSAE Application Security Gateway. An attacker can use this vulnerability to obtain...

WordPress WP Hide Security Enhancer Plugin <=1.3.9.2 - Arbitrary File Download Vulnerability

WordPress WP Hide Security Enhancer Plugin below 1.3.9.2 is vulnerable to arbitrary file download. This vulnerability allows an attacker to download any file from the victim web site. Solution Update plugin to v1.4.1...

WP Hide & Security Enhancer <= 1.3.9.2 - Arbitrary File Download

The WP Hide & Security Enhancer WordPress plugin was affected by an Arbitrary File Download security vulnerability...

Arbitrary File Download Vulnerability in Gitzo Application Security Gateway

Shanghai Giteng Communication Equipment Co., Ltd. application security gateway adopts advanced MIPS multi-core architecture, equipped with self-developed security operating system, and realizes in-depth analysis of users, applications and contents through single-path parallel processing of...

IBM Daeja ViewONE Arbitrary File Download Vulnerability

IBM Daeja ViewONE Virtual, Daeja ViewONE Standard, and Daeja ViewONE Professional are all products of IBM Corporation of the U.S.A. IBM Daeja ViewONE Virtual is a document viewer that supports TIFF, PDF, and Office-based documents. IBM Daeja ViewONE Virtual is a document viewer that supports TIFF...

Arbitrary File Download Vulnerability in WeADMIN ITOSS IT Service Management Platform

WeADMIN ITOSS is a network management software. An arbitrary file download vulnerability exists in the WeADMIN ITOSS IT Service Management Platform, which can be exploited by attackers to download system files...

Arbitrary File Download Vulnerability in javaee Forum System

javaee forum system is a free open source javaee forum source code system , using springMVC mybatis framework development. javaee forum system has an arbitrary file download vulnerability , an attacker can forge files through the path in the request to download the site configuration or system...

CVE-2017-6704

A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated, remote attacker to perform arbitrary file downloads that could allow the attacker to read files from the underlying filesystem. More Information: CSCvc90335. Known Affected...

Joomla! Component Joomanager 2.0.0 - com_Joomanager Arbitrary File Download

Joomla! Component Joomanager 2.0.0 - comJoomanager Arbitrary File Download !/usr/bin/python2 -- coding:utf-8 -- ''' GNU GENERAL PUBLIC LICENSE Version 3, 29 June 2007 Copyright C 2007 Free Software Foundation, Inc. Everyone is permitted to copy and distribute verbatim copies of this license...

Joomla! Component Joomanager 2.0.0 - 'com_Joomanager' Arbitrary File Download

!/usr/bin/python2 -- coding:utf-8 -- ''' GNU GENERAL PUBLIC LICENSE Version 3, 29 June 2007 Copyright C 2007 Free Software Foundation, Inc. Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Preamble The GNU General Public Licens...

Cisco Prime Collaboration Provisioning Arbitrary File Download Vulnerability

Cisco Prime Collaboration is a comprehensive video and voice service assurance and management system. A security vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool allows an unauthenticated, remote attacker to download arbitrary files and read files within the...

WordPress Photo Gallery plugin arbitrary file download vulnerability (CNVD-2017-15112)

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An arbitrary file download vulnerability exists in the WordPress Photo Gallery plugin. An attacker can exploi...

Arbitrary File Download Vulnerability in Generalized cms of Office System of Higher Education Worker Network

Higher Education Academic Network Office System General CMS is a college office system. There is an arbitrary file download vulnerability in the generic cms. The vulnerability stems from the downloadfile.aspx program downurl parameter can be controlled due to the attacker can take advantage of th...

Arbitrary File Download Vulnerability in Research Journal General Cms

Research Journal General cms is a research journal content management system of Beijing Magtech Technology Development Co. The cms is vulnerable to an arbitrary file download vulnerability. An attacker can exploit this vulnerability to obtain system information...

Arbitrary File Download Vulnerability in Campus Card Portal of Harbin Xinzhongxin Electronics Co.

Campus Card Portal is a digital campus solution. An arbitrary file download vulnerability exists in the Campus Card Portal of Harbin Xinzhongxin Electronics Co. The vulnerability allows an attacker to download arbitrary files from the server...

CMS4J suffers from an arbitrary file download vulnerability patch bypass vulnerability

CMS4J is a CMS system developed by Beijing Paidao Network based on JSP program. CMS4J has an arbitrary file download vulnerability patch bypass vulnerability. The vulnerability arises from the DownloadFile servlet arbitrary file download repair code to download the file filtering is not strict, c...

S-CMS V3.0 build20170601 has an arbitrary file download vulnerability

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. S-CMS V3.0 build20170601 '/admin/download.asp' page has an arbitrary file download vulnerability, allowing attackers to exploit the vulnerability to download database information...