CVE-2020-9751

Naver Cloud Explorer before 2.2.2.11 allows the system to download an arbitrary file from the attacker's server and execute it during the upgrade...

CVE-2020-9751

Naver Cloud Explorer before 2.2.2.11 allows the system to download an arbitrary file from the attacker's server and execute it during the upgrade...

CVE-2020-9751

CVE-2020-9751 affects Naver Cloud Explorer prior to 2.2.2.11 . The flaw allows an attacker to cause the upgrade process to download an arbitrary file from the attacker’s server and execute it. The connected documents confirm the vulnerable software and the upgrade-time arbitrary code execution ve...

Arbitrary File Download Vulnerability in Kindergarten Management System

Xianqi Kindergarten Online Management System is a professional and easy-to-use kindergarten online management system that supports real-time synchronization of data between smartphone APP and computer. Xianqi Kindergarten Management System has an arbitrary file download vulnerability, which can b...

CVE-2020-9751: Download of Code Without Integrity Check

Naver Cloud Explorer before 2.2.2.11 allows the system to download an arbitrary file from the attacker's server and execute it during the upgrade...

Arbitrary File Download Vulnerability in Visualized Smart Campus

Visualized smart campus is based on the physical environment of the campus, taking the real campus as a whole as a blueprint, using network technology, completing the construction of the visualization of the campus geographic information system, realizing the campus multi-dimensional virtual...

WordPress Duplicator Plugin Arbitrary File Download

An arbitrary file download vulnerability exists in WordPress Duplicator plugin. Successful exploitation of this vulnerability would allow a remote attacker to download arbitrary files from the affected system...

Arbitrary File Download Vulnerability in ZrLog V2.1.1

ZrLog is a blogging program developed using Java. ZrLog V2.1.1 suffers from an arbitrary file download vulnerability, which can be exploited by an attacker to download any file on the server via a constructed path...

WordPress Duplicator plugin <= 1.3.26 - Unauthenticated Arbitrary File Download vulnerability

Unauthenticated Arbitrary File Download vulnerability found in the WordPress Duplicator plugin versions = 1.3.26. Solution Update the WordPress Duplicator plugin to the latest available version at least 1.3.28...

Duplicator 1.3.24 & 1.3.26 - Unauthenticated Arbitrary File Download

The issue is being actively exploited, and allows attackers to download arbitrary files, such as the wp-config.php file. According to the vendor, the vulnerability was only in two versions v1.3.24 and v1.3.26, the vulnerability wasn't present in versions 1.3.22 and before...

CVE-2019-14767: Improper Limitation of a Pathname to a Restricted Directory

In DIMO YellowBox CRM before 6.3.4, Path Traversal in images/Apparence dossier=../ and servletrecuperefichier document=../ allows an unauthenticated user to download arbitrary files from the server...

Freelancy 1.0.0 Remote Code Execution

Exploit Title: Freelancy - Freelance Management App v1.0.0 - RCE Authenticated Arbitrary File Download Date: 03-01-2019 Exploit Author: Ismail Tasdelen Vendor Homepage: https://vaaip.com/ Software Link: https://codecanyon.net/item/freelancy-freelance-project-management-application/25288636...

Arbitrary File Download Vulnerability in Cruise Cloud Light Forum System

Cruise Cloud Light Forum System is an open source web application based on JAVA + MYSQL architecture, including forums, Q&A modules. Patrol Cloud Light Forum system has an arbitrary file download vulnerability, attackers can use this vulnerability to download arbitrary files to obtain sensitive...

Arbitrary File Download Vulnerability in School Worry-Free Teacher Evaluation System

The Schoolfree Teacher Evaluation System is a school teaching management system. There is an arbitrary file download vulnerability in the System, which can be exploited by an attacker to download the website database and obtain sensitive information in the database...

CVE-2019-20354

The web application component of piSignage before 2.6.4 allows a remote attacker authenticated as a low-privilege user to download arbitrary files from the Raspberry Pi via api/settings/log?file=../ path traversal. In other words, this issue is in the player API for log download...

PT-2020-10393

Name of the Vulnerable Software and Affected Versions piSignage versions prior to 2.6.4 Description The issue allows a remote attacker, authenticated as a low-privilege user, to download arbitrary files from the Raspberry Pi. This is achieved through a path traversal vulnerability in the...

CVE-2019-20354: Improper Limitation of a Pathname to a Restricted Directory

The web application component of piSignage before 2.6.4 allows a remote attacker authenticated as a low-privilege user to download arbitrary files from the Raspberry Pi via api/settings/log?file=../ path traversal. In other words, this issue is in the player API for log download...

Arbitrary File Download Vulnerability in Website Building System of Shanghai Zhongke Network Information Technology Co.

Ltd. is engaged in the information technology field of Internet network services and network business application research including e-commerce, commercial website planning and web design, etc.. Shanghai Zhongke Network Information Technology Co., Ltd. station building system exists arbitrary fil...

EJU real estate system ejucms 1.3 has an arbitrary file download vulnerability

EJU real estate system ejucms is a set of localized O2O real estate website platform system. EJU Real Estate System ejucms 1.3 has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

Arbitrary file download vulnerability in Myucms frontend

MyuCMS open source content management system developed using ThinkPHP community mall. MyuCMS front-end arbitrary file download vulnerability , an attacker can exploit the vulnerability to download any file...