CVE-2017-5795: Exposure of Sensitive Information to an Unauthorized Actor

A Local Arbitrary File Download vulnerability in HPE Intelligent Management Center IMC version PLAT 7.2 E0403P06 was found...

Arbitrary file download vulnerability in phpwechat version 1.1.6

phpWechat is a free and open source microsoft public platform management system. An arbitrary file download vulnerability exists in phpwechat version 1.1.6 at the data backup, which can be exploited by an attacker to download arbitrary files from the server, such as script code, service and syste...

Weak password, arbitrary file download vulnerability in Byzoro PatrolFlow-AM series security gateway

PatrolFlow-AM series products are high-performance application-delivery Internet behavior management devices launched by Byzoro Networks to meet the needs of Internet access users in the areas of information content security, regulation of online behavior, utilization of network resources,...

Jtag Members Directory Arbitrary File Download Vulnerability

Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other features . Jtag Members Directory is used in one of the member management plug-ins. An arbitrary file download vulnerability exists in...

Arbitrary File Download Vulnerability in CAJViewer, a Specialized Reader for China Knowledge Network (CNN)

CAJViewer is a series of CAJViewer products of National Engineering Research Center of CD-ROM and Tsinghua Tongfang Knowledge Network Beijing Technology Co., Ltd. and a special full-text format viewer for China Periodicals Network CJN, which supports TEB, CAJ, NH, KDH, and PDF format files of CJN...

CVE-2018-6008

Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the downloadfile parameter...

CVE-2018-6008

Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the downloadfile parameter...

Design/Logic Flaw

Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the downloadfile parameter...

CVE-2018-6008

Affected software : Joomla! Jtag Members Directory 5.3.7. Vulnerability : Local File Inclusion via the download_file parameter, enabling arbitrary file download. Root cause : improper handling of input in the component leading to LFI. Impact : potential unauthorized access to sensitive server fil...

CVE-2018-6008

Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the downloadfile parameter...

PT-2018-17291

Name of the Vulnerable Software and Affected Versions: Joomla! component Jtag Members Directory version 5.3.7 Description: A security issue exists in the Jtag Members Directory component for Joomla!, allowing arbitrary file download. This is achieved via the download file parameter...

CVE-2018-6008: Exposure of Sensitive Information to an Unauthorized Actor

Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the downloadfile parameter...

Joomla! Jtag Members Directory 5.3.7 Arbitrary File Download

Exploit Title: Joomla! Component Jtag Members Directory 5.3.7 - Arbitrary File Download Dork: N/A Date: 27.01.2018 Vendor Homepage: https://joomlatag.com/ Software Link: https://extensions.joomla.org/extensions/extension/clients-a-communities/members-lists/jtag-members-directory/ Version: 5.3.7...

Joomla! Component Jtag Members Directory 5.3.7 - Arbitrary File Download

Joomla! Component Jtag Members Directory 5.3.7 - Arbitrary File Download Exploit Title: Joomla! Component Jtag Members Directory 5.3.7 - Arbitrary File Download Dork: N/A Date: 27.01.2018 Vendor Homepage: https://joomlatag.com/ Software Link:...

Joomla Jtag Members Directory 5.3.7 Component - Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Jtag Members Directory 5.3.7 - Arbitrary File Download Dork: N/A Date: 27.01.2018 Vendor Homepage: https://joomlatag.com/ Software Link:...

Joomla! Component Jtag Members Directory 5.3.7 - Arbitrary File Download

Exploit Title: Joomla! Component Jtag Members Directory 5.3.7 - Arbitrary File Download Dork: N/A Date: 27.01.2018 Vendor Homepage: https://joomlatag.com/ Software Link: https://extensions.joomla.org/extensions/extension/clients-a-communities/members-lists/jtag-members-directory/ Version: 5.3.7...

ManageEngine Netflow Analyzer / IT360 - Arbitrary File Download Vulnerability

Exploit for multiple platform in category web applications Arbitrary file download in ManageEngine Netflow Analyzer and IT360 Discovered by Pedro Ribeiro email protected, Agile Information Security ========================================================================== Disclosure: 30/11/2014 /...

ManageEngine OpManager / Applications Manager / IT360 -FailOverServlet Multiple Vulnerability

Exploit for multiple platform in category web applications Multiple vulnerabilities in FailOverServlet in ManageEngine OpManager, Applications Manager and IT360 Discovered by Pedro Ribeiro email protected, Agile Information Security...

Arbitrary File Download Vulnerability in Xingyunhai CMS v3.5

Xing Yunhai CMS XYHCMS is a completely open source CMS content management system, simple and easy to use. XYHCMS V3.5 version of the existence of arbitrary file download vulnerability, the attacker can be constructed through the parameters to download any file server , such as script code , servi...

Wordpress liberator theme - Arbitrary file download Vulnerability

Exploit for php platform in category web applications -===================­====================­=================- Exploit title : Wordpress liberator theme arbitrary file download author : MrSqar Yemeni hacker Team : IT-Geeks Tested on : BackBox linux check if site is vulnerabe :...