Arbitrary File Download Vulnerability in Filepath Parameter of Mixcall Attendant Management System

Mixcall seat management system is based on B/S architecture, the management personnel can directly log into the Mixcall seat management center through the computer, and view the detailed situation related to the seat personnel's voice services. An arbitrary file download vulnerability exists in t...

Arbitrary File Download Vulnerability in ShowDownloadFile Function of Tibco Call Center System

The core of Tibco's call center system is a communication-based system for internal and external corporate communication. An arbitrary file download vulnerability exists in the showDownloadFile function of the ITS Call Center System. The vulnerability file is:...

Arbitrary File Download Vulnerability in ShowgetFaqBackupFile Function of Tibco Call Center System

The core of Tibco's call center system is a communication-based system for internal and external corporate communication. An arbitrary file download vulnerability exists in the showgetFaqBackupFile function of the Tibco Call Center System. The vulnerability file is:...

Arbitrary File Download Vulnerability in ShowDownload Function of Tibco Call Center System

The core of Tibco's call center system is a communication-based system for internal and external corporate communication. An arbitrary file download vulnerability exists in the showDownload function of the Tibco Call Center System. The vulnerability file is: /userweb/php/index/log.class.php, whic...

Arbitrary File Download Vulnerability in ZTE Network Sentinel

Shenzhen Zhongke Xinye Information Technology Development Co., Ltd. was registered on September 28, 2002 in Nanshan Bureau of Shenzhen Municipal Market Supervision Administration. The company's business scope includes the development of information and computer technology, technical services;...

Mastery OA /general/mytable/intel_view/video_file.php arbitrary File Download vulnerability

No description provided by source...

Wordpress Multi Themes Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress Multi Themes Arbitrary File Download Vulnerability Exploit Author : xBADGIRL21 Dork : wp-content/themes/ /lib/scripts/ Tested on: BackBox skype:xbadgirl21 Date: 22/08/2016 video Proof : https://youtu.be/DFtF14ShHk...

Wordpress force download Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress force download Arbitrary File Download Dork 1 : inurl:force-download.php?file=wp-content/uploads Dork 2 : inurl:wp-content/uploads inurl:force-download.php?file= Vendor Homepage : http://elouai.com/force-download.php...

WordPress W3 Total Cache Plugin <= 0.9.4.1 - Arbitrary File Download

This plugin is prone to authenticated arbitrary file download vulnerability. Solution Update the plugin...

W3 Total Cache <= 0.9.4.1 – Authenticated Arbitrary File Download

When you're creating a support ticket in the plugin page, you can add one or more of your your template themes. Then this file will be send to the author to help him resolving the issue. Now you select one, you send the form and same as for the files before, you will send it to the author to help...

W3 Total Cache <= 0.9.4.1 – Authenticated Arbitrary File Download

When you're creating a support ticket in the plugin page, you can add one or more of your your template themes. Then this file will be send to the author to help him resolving the issue. Now you select one, you send the form and same as for the files before, you will send it to the author to help...

MuM MapEdit has multiple vulnerabilities

MuM MapEdit is software that provides data to the Internet and intranet to facilitate community and government infrastructure. MapEdit version 3.2.6.0 suffers from arbitrary file upload, arbitrary file download, and arbitrary SQL command execution vulnerabilities, which can be exploited by...

Siemens IP Camera Arbitrary File Download Vulnerability

Siemens IP Camera is a Siemens webcam. Siemens IP Camera is vulnerable to an arbitrary file download vulnerability, which allows an attacker to download the config.ini file, which contains the administrator account password for the camera...

BageCms content management system background arbitrary file download vulnerability

BageCMS is a multi-functional open source web content management system based on php5+mysql5 development. BageCms content management system backend arbitrary file download vulnerability , allowing attackers to exploit the vulnerability can download any file in the server...

Arbitrary File Download and Weak Password Vulnerability in DVR Access Gateway of Suzhou Kedar Technology Co.

DVR digital video recorder is a set of computer system for image storage and processing, with the function of long time video/voice recording, audio recording, remote monitoring and control. The DVR access gateway of Suzhou Kodak Technology Co., Ltd. suffers from arbitrary file download and weak...

Siemens IP Camera 0.1.69 Arbitrary File Download

Exploit Title: Siemens IP Camera :: Arbitrary file download Date: 14-september-2016 Exploit Author: vuppala.Dhanunjaya Vendor Homepage: www.siemens.com Version: V0.1.69 Tested on: Windows 10,ubuntu 14.04 LTS Email : [email protected] ======================================== TEAM...

Arbitrary File Download Vulnerability in Beijing Zhiqingweiye Submission System

Beijing Zhiqingweiye Submission System is a CMS system for all kinds of topics or magazines, which can be submitted remotely. The product has an arbitrary file download vulnerability, the vulnerability URL is: /Admin/Upload/Index?path=%2Fweb.config&fileName=%E9%99%84%E5%9B%BE&Browser=IE, an...

File Containment Vulnerability in Minyou Website Builder System

Minyou web site building system is developed by java content management system is mostly used in government, school management system. The product's download.jsp page pathfile parameter exists arbitrary file download vulnerability, poc for: http://host/download.jsp?pathfile=/... /... /... /... /...

Joomla component com_joomanager parameter path arbitrary file download vulnerability

Joomla! is a content management system. An arbitrary file download vulnerability exists in the parameter path of the Joomla component joomanagerde. Allows an attacker to exploit the vulnerability to download sensitive information such as configuration files...

File Download Vulnerability in New Windward Technology's Online Learning Test System

New Windward Technology Online Learning Exam System is built based on enterprise-level database platform, the system architecture using a three-tier structure, B/S mode development can be used for online training and examination system. The product exists arbitrary file download vulnerability,...