CVE-2017-7424: Improper Limitation of a Pathname to a Restricted Directory

A Path Traversal CWE-22 vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote authenticated users to download arbitrary files from a system running the product, if this component is...

Dzzoffice v1.3.1 Arbitrary File Download Vulnerability in Multiple Pages

DzzOffice is an open source cloud storage management tool. Dzzoffice v1.3.1 Arbitrary file download vulnerability exists in the 'pdfviewer.php', 'view.php', 'download.php' and 'attachment.php' pages, which can be exploited by attackers to obtain sensitive information...

Arbitrary file download vulnerability in the downmaterial function on the YxtCMF CourseController.class.ph page

YxtCMF Yi Xue Tang Online Learning System is an online learning platform system developed with thinkphp+bootstrap as the framework. An arbitrary file download vulnerability exists in the YxtCMF CourseController.class.ph page downmaterial function. Allows an attacker to exploit the vulnerability t...

WebFile Explorer 1.0 - Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: WebFile Explorer 1.0 - Arbitrary File Download Dork: N/A Date: 09.08.2017 Vendor Homepage : http://speicher.host/ Software Link: https://codecanyon.net/item/webfile-explorer/20366192/ Demo:...

WebFile Explorer 1.0 - Arbitrary File Download

Exploit Title: WebFile Explorer 1.0 - Arbitrary File Download Dork: N/A Date: 09.08.2017 Vendor Homepage : http://speicher.host/ Software Link: https://codecanyon.net/item/webfile-explorer/20366192/ Demo: http://speicher.host/envato/codecanyon/demo/web-file-explorer/ Version: 1.0 Category: Webapp...

WebFile Explorer 1.0 - Arbitrary File Download

WebFile Explorer 1.0 - Arbitrary File Download Exploit Title: WebFile Explorer 1.0 - Arbitrary File Download Dork: N/A Date: 09.08.2017 Vendor Homepage : http://speicher.host/ Software Link: https://codecanyon.net/item/webfile-explorer/20366192/ Demo:...

WebFile Explorer 1.0 - Arbitrary File Download

Exploit Title: WebFile Explorer 1.0 - Arbitrary File Download Dork: N/A Date: 09.08.2017 Vendor Homepage : http://speicher.host/ Software Link: https://codecanyon.net/item/webfile-explorer/20366192/ Demo: http://speicher.host/envato/codecanyon/demo/web-file-explorer/ Version: 1.0 Category: Webapp...

WebFile Explorer 1.0 Arbitrary File Download

Exploit Title: WebFile Explorer 1.0 - Arbitrary File Download Dork: N/A Date: 09.08.2017 Vendor Homepage : http://speicher.host/ Software Link: https://codecanyon.net/item/webfile-explorer/20366192/ Demo: http://speicher.host/envato/codecanyon/demo/web-file-explorer/ Version: 1.0 Category: Webapp...

DzzOffice v1.3.1 Arbitrary File Download Vulnerability in Frontend

DzzOffice is a cloud storage management tool , based on the free open source release , can be used as a personal network disk , team , enterprise network disk for use . DzzOffice v1.3.1 front-end arbitrary file download vulnerability exists due to the program fails to share path parameter for...

Arbitrary File Download Vulnerability in MS-MCMS Frontend of MDFMS Platform

MS-MCMS is a web management system using pure java development. A java + spring + mybatis web site building system developed by Mingfei Technology Co. MS-MCMS v4.6.0 version of the MS platform exists arbitrary file download vulnerability in the foreground , due to the system failed to...

WordPress WP Hide And Security Enhancer Plugin Arbitrary File Download

An arbitrary file download vulnerability exists in Wordpress WP Hide & Security Enhancer Plugin. Successful exploitation of this vulnerability by sending a specially crafted HTTP request would allow a remote attacker to gain access to arbitrary files...

Arbitrary File Download Vulnerability in Principal Century NSAE Application Security Gateway

NSAE Application Security Gateway is a hardware device independently developed by Principal Century to provide security proxy services for application systems. An arbitrary file download vulnerability exists in NSAE Application Security Gateway. An attacker can use this vulnerability to obtain...

WP Hide & Security Enhancer <= 1.3.9.2 - Arbitrary File Download

The WP Hide & Security Enhancer WordPress plugin was affected by an Arbitrary File Download security vulnerability...

WordPress WP Hide Security Enhancer Plugin <=1.3.9.2 - Arbitrary File Download Vulnerability

WordPress WP Hide Security Enhancer Plugin below 1.3.9.2 is vulnerable to arbitrary file download. This vulnerability allows an attacker to download any file from the victim web site. Solution Update plugin to v1.4.1...

Arbitrary File Download Vulnerability in Gitzo Application Security Gateway

Shanghai Giteng Communication Equipment Co., Ltd. application security gateway adopts advanced MIPS multi-core architecture, equipped with self-developed security operating system, and realizes in-depth analysis of users, applications and contents through single-path parallel processing of...

IBM Daeja ViewONE Arbitrary File Download Vulnerability

IBM Daeja ViewONE Virtual, Daeja ViewONE Standard, and Daeja ViewONE Professional are all products of IBM Corporation of the U.S.A. IBM Daeja ViewONE Virtual is a document viewer that supports TIFF, PDF, and Office-based documents. IBM Daeja ViewONE Virtual is a document viewer that supports TIFF...

Arbitrary File Download Vulnerability in WeADMIN ITOSS IT Service Management Platform

WeADMIN ITOSS is a network management software. An arbitrary file download vulnerability exists in the WeADMIN ITOSS IT Service Management Platform, which can be exploited by attackers to download system files...

Arbitrary File Download Vulnerability in javaee Forum System

javaee forum system is a free open source javaee forum source code system , using springMVC mybatis framework development. javaee forum system has an arbitrary file download vulnerability , an attacker can forge files through the path in the request to download the site configuration or system...

CVE-2017-6704

A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated, remote attacker to perform arbitrary file downloads that could allow the attacker to read files from the underlying filesystem. More Information: CSCvc90335. Known Affected...

CVE-2017-6704: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated, remote attacker to perform arbitrary file downloads that could allow the attacker to read files from the underlying filesystem. More Information: CSCvc90335. Known Affected...