3252 matches found
Arbitrary File Downloading Vulnerability in Xianqi Kindergarten Online Management System
Shanxi Xianqi Technology Co., Ltd. is a high-tech enterprise integrating research and development, production, sales and service of hardware and software. There is an arbitrary file download vulnerability in the online kindergarten management system, through which an attacker can download any fil...
PT-2019-16816
Name of the Vulnerable Software and Affected Versions OpenEMR versions 5.0.1 and earlier Description The patient file download interface in OpenEMR contains a directory traversal flaw. This flaw allows authenticated attackers to download arbitrary files from the host system. Recommendations For...
CVE-2019-3967: Improper Limitation of a Pathname to a Restricted Directory
In OpenEMR 5.0.1 and earlier, the patient file download interface contains a directory traversal flaw that allows authenticated attackers to download arbitrary files from the host system...
PT-2019-13738
Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.2 Description An issue was discovered in the custom/ajax download.php file via the fileName parameter, allowing an attacker to download any file readable by the user www-data from server storage. If the requested...
CVE-2019-14530: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in custom/ajaxdownload.php in OpenEMR before 5.0.2 via the fileName parameter. An attacker can download any file that is readable by the user www-data from server storage. If the requested file is writable for the www-data user and the directory...
Joomla JS Support Ticket Component (com_jssupportticket) 1.1.5 - Arbitrary File Download Vulnerabili
Exploit for php platform in category web applications Exploit Title: Joomla! component comjssupportticket - Arbitrary File Download Dork: inurl:"index.php?option=comjssupportticket" Exploit Author: qw3rTyTy Vendor Homepage: http://joomsky.com/ Software Link:...
Joomla JS Support Ticket 1.1.5 Arbitrary File Download
Exploit Title: Joomla! component comjssupportticket - Arbitrary File Download Dork: inurl:"index.php?option=comjssupportticket" Date: 08.08.19 Exploit Author: qw3rTyTy Vendor Homepage: http://joomsky.com/ Software Link: https://www.joomsky.com/46/download/1.html Version: 1.1.5 Tested on:...
Joomla! Component JS Support Ticket (component com_jssupportticket) 1.1.5 - Arbitrary File Download
Joomla! Component JS Support Ticket component comjssupportticket 1.1.5 - Arbitrary File Download Exploit Title: Joomla! component comjssupportticket - Arbitrary File Download Dork: inurl:"index.php?option=comjssupportticket" Date: 08.08.19 Exploit Author: qw3rTyTy Vendor Homepage:...
Arbitrary File Download Vulnerability in Zhiyuan OA
Zhiyuan OA is an office system developed by Beijing Zhiyuan Internet Software Co. There is an arbitrary file download vulnerability in Zhiyuan OA, which can be exploited by attackers to download arbitrary files and obtain sensitive information...
Joomla! Component JS Support Ticket (component com_jssupportticket) 1.1.5 - Arbitrary File Download
Exploit Title: Joomla! component comjssupportticket - Arbitrary File Download Dork: inurl:"index.php?option=comjssupportticket" Date: 08.08.19 Exploit Author: qw3rTyTy Vendor Homepage: http://joomsky.com/ Software Link: https://www.joomsky.com/46/download/1.html Version: 1.1.5 Tested on:...
OpenEMR < 5.0.2 Multiple Vulnerabilities
OpenEMR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:open-emr:openemr"; ifdescription...
Arbitrary File Download Vulnerability in Panavision OA
Panavision OA Office System is a coordination office software. An arbitrary file download vulnerability exists in Panmicro OA, which can be exploited by attackers to obtain sensitive information...
Ctcms v2.0.2 Arbitrary File Download Vulnerability
Ctcms video system Ctcms video system is a PHP + Mysql development of video management system. Ctcms v2.0.2 has an arbitrary file download vulnerability that can be exploited by attackers to download arbitrary files and obtain sensitive information...
Arbitrary File Download Vulnerability in Isthmus Electronic Document Security Management System (CNVD-2019-27482)
Electronic document security management system abbreviation: CDG is an electronic document security protection software. An arbitrary file read vulnerability exists in the IZP Electronic Document Security Management System. The download function somewhere in Yisetong Electronic Document Security...
Arbitrary File Download Vulnerability in StarNet Ruijie Multimedia Conference System BMS
Fujian StarNet Ruijie Communication Co., Ltd. is an ICT application solution provider. An arbitrary file download vulnerability exists in the StarNet Ruijie Multimedia Conference System BMS. An attacker can exploit the vulnerability to download other files, such as a configuration file containing...
ArtCMS V9.2 suffers from arbitrary file download vulnerability
ArtCMS is a website management system. ArtCMS V9.2 suffers from an arbitrary file download vulnerability. An attacker can exploit the vulnerability to download arbitrary files...
Arbitrary File Download Vulnerability in Sida Fluoroplastics Co.
Remote server WEB service does not do suffix filtering and directory control on user-submitted download files, leading to malicious attackers to construct paths to download arbitrary server files. http://60.191.211.210:8088/yyoa/DownExcelBeanServlet?contenttype=username&contentvalue=&state=1&peri...
Cisco Data Center Network Manager Arbitrary File Download Vulnerability
According to its self-reported version, Cisco Data Center Network Manager is affected by an arbitrary file download vulnerability in the web-based management interface. An unauthenticated, remote attacker can exploit this, to download arbitrary files and disclose sensitive information. Please see...
CVE-2019-9886
Any URLs with downloadattachment.php under templates or home folders can allow arbitrary files downloaded without login in BroadLearning eClass before version ip.2.5.10.2.1...
CVE-2019-9886: Improper Limitation of a Pathname to a Restricted Directory
Any URLs with downloadattachment.php under templates or home folders can allow arbitrary files downloaded without login in BroadLearning eClass before version ip.2.5.10.2.1...