Design/Logic Flaw

The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the name parameter for the download-snapshot URL. An unauthenticated remote attacker can use this vulnerability to download arbitrary files...

CVE-2017-11512

The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the name parameter for the download-snapshot URL. An unauthenticated remote attacker can use this vulnerability to download arbitrary files...

CVE-2017-11511

The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the filepath parameter for the download-file URL. An unauthenticated remote attacker can use this vulnerability to download arbitrary files...

CVE-2017-11512

Affected product: ManageEngine ServiceDesk 9.3.9328. Vulnerability: Arbitrary file retrieval/download due to improper restrictions on the pathname in the name parameter of the download-snapshot path. Impact: Unauthenticated remote attacker can download arbitrary files from the server. Root cause:...

PT-2017-12062

Name of the Vulnerable Software and Affected Versions ManageEngine ServiceDesk version 9.3.9328 Description The issue allows for arbitrary file downloads due to improper restrictions of the pathname used in the filepath parameter for the "download-file" URL. An unauthenticated remote attacker can...

CVE-2017-11512

The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the name parameter for the download-snapshot URL. An unauthenticated remote attacker can use this vulnerability to download arbitrary files. Recent assessments:...

PT-2017-12063

Name of the Vulnerable Software and Affected Versions ManageEngine ServiceDesk version 9.3.9328 Description The issue allows for arbitrary file downloads due to improper restrictions of the pathname used in the name parameter for the "download-snapshot" URL. An unauthenticated remote attacker can...

CVE-2017-11511: Improper Limitation of a Pathname to a Restricted Directory

The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the filepath parameter for the download-file URL. An unauthenticated remote attacker can use this vulnerability to download arbitrary files...

CVE-2017-11512: Improper Limitation of a Pathname to a Restricted Directory

The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the name parameter for the download-snapshot URL. An unauthenticated remote attacker can use this vulnerability to download arbitrary files...

Catalyst Mahara Arbitrary File Download Vulnerability

Catalyst Mahara is a social networking system from Catalyst IT in New Zealand. The system includes a blog, resume builder, file manager, and more. A security vulnerability exists in Catalyst Mahara versions 15.04 before 15.04.8, 15.10 before 15.10.4, and 16.04 before 16.04.2. An attacker could...

ConverTo Video Downloader&Converter File Download Vulnerability

ConverTo Video Downloader&Converter is an online video download system. A security vulnerability exists in ConverTo Video Downloader&Converter version 1.4.1. The vulnerability can be exploited to download arbitrary files by sending a 'token' parameter to the download.php file...

ECMAIL后台任意文件下载

No description provided by source...

CVE-2017-15956

ConverTo Video Downloader & Converter 1.4.1 allows Arbitrary File Download via the token parameter to download.php...

CVE-2017-15956

ConverTo Video Downloader & Converter 1.4.1 allows Arbitrary File Download via the token parameter to download.php...

Design/Logic Flaw

ConverTo Video Downloader & Converter 1.4.1 allows Arbitrary File Download via the token parameter to download.php...

CVE-2017-15956

ConverTo Video Downloader & Converter 1.4.1 allows Arbitrary File Download via the token parameter to download.php...

CVE-2017-15956

ConverTo Video Downloader & Converter v1.4.1 is vulnerable to an Arbitrary File Download via the token parameter to download.php. CNVD-2017-36121 and CVE-2017-15956 describe that the vulnerability allows downloading arbitrary files by supplying a crafted token, exposing sensitive data. The root c...

PT-2017-14309

Name of the Vulnerable Software and Affected Versions ConverTo Video Downloader & Converter version 1.4.1 Description The issue allows for Arbitrary File Download. This is achieved via the token parameter to the "download.php" endpoint. Recommendations For ConverTo Video Downloader & Converter...

CVE-2017-15956: Improper Input Validation

ConverTo Video Downloader & Converter 1.4.1 allows Arbitrary File Download via the token parameter to download.php...

OpenText Documentum Content Server - Arbitrary File Download Privilege Escalation

OpenText Documentum Content Server - Arbitrary File Download Privilege Escalation !/usr/bin/env python Opentext Documentum Content Server formerly known as EMC Documentum Content Server does not properly validate input of PUTFILE RPC-command which allows any authenticated user to hijack arbitrary...