Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Joomanager_Project Joomanager

!Versionhttps://img.shields.io/badge/Joomla-comjoomanager2...

Joomla! Component Joomanager 2.0.0 - com_Joomanager Arbitrary File Download

Joomla! Component Joomanager 2.0.0 - comJoomanager Arbitrary File Download !/usr/bin/python2 -- coding:utf-8 -- ''' GNU GENERAL PUBLIC LICENSE Version 3, 29 June 2007 Copyright C 2007 Free Software Foundation, Inc. Everyone is permitted to copy and distribute verbatim copies of this license...

Joomla! Component Joomanager 2.0.0 - 'com_Joomanager' Arbitrary File Download

!/usr/bin/python2 -- coding:utf-8 -- ''' GNU GENERAL PUBLIC LICENSE Version 3, 29 June 2007 Copyright C 2007 Free Software Foundation, Inc. Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Preamble The GNU General Public Licens...

Cisco Prime Collaboration Provisioning Arbitrary File Download Vulnerability

Cisco Prime Collaboration is a comprehensive video and voice service assurance and management system. A security vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool allows an unauthenticated, remote attacker to download arbitrary files and read files within the...

WordPress Photo Gallery plugin arbitrary file download vulnerability (CNVD-2017-15112)

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An arbitrary file download vulnerability exists in the WordPress Photo Gallery plugin. An attacker can exploi...

Arbitrary File Download Vulnerability in Generalized cms of Office System of Higher Education Worker Network

Higher Education Academic Network Office System General CMS is a college office system. There is an arbitrary file download vulnerability in the generic cms. The vulnerability stems from the downloadfile.aspx program downurl parameter can be controlled due to the attacker can take advantage of th...

Arbitrary File Download Vulnerability in Research Journal General Cms

Research Journal General cms is a research journal content management system of Beijing Magtech Technology Development Co. The cms is vulnerable to an arbitrary file download vulnerability. An attacker can exploit this vulnerability to obtain system information...

Arbitrary File Download Vulnerability in Campus Card Portal of Harbin Xinzhongxin Electronics Co.

Campus Card Portal is a digital campus solution. An arbitrary file download vulnerability exists in the Campus Card Portal of Harbin Xinzhongxin Electronics Co. The vulnerability allows an attacker to download arbitrary files from the server...

CMS4J suffers from an arbitrary file download vulnerability patch bypass vulnerability

CMS4J is a CMS system developed by Beijing Paidao Network based on JSP program. CMS4J has an arbitrary file download vulnerability patch bypass vulnerability. The vulnerability arises from the DownloadFile servlet arbitrary file download repair code to download the file filtering is not strict, c...

S-CMS V3.0 build20170601 has an arbitrary file download vulnerability

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. S-CMS V3.0 build20170601 '/admin/download.asp' page has an arbitrary file download vulnerability, allowing attackers to exploit the vulnerability to download database information...

Five fingers CMS system s parameters exist arbitrary file download vulnerability

Five Fingers CMS is an open source content management system suitable for portals, corporate website builders, mobile websites and microblogging promotion. Five Fingers CMS system version 4.0.0 there are arbitrary file download vulnerabilities. Due to the failure of effective filtering parameters...

Huawei HedEx Lite Arbitrary File Download Vulnerability

Huawei HedEx Lite is a document management software from Huawei China. An arbitrary file download vulnerability exists in Huawei HedEx Lite versions prior to V200R006C00. An attacker can exploit this vulnerability to download arbitrary files locally and disclose information...

Security Advisory - Multiple Security Vulnerabilities in HedEx product

HedExHuawei Electronic Documentation Explorer，Huawei electronic document browser, mainly used to browse Huawei products electronic documents. HedEx exist some vulnerabilities. HedEx has an arbitrary file download vulnerability. An attacker could exploit it to download arbitrary files on a target...

U.S. Dept Of Defense: Arbitary file download vulnerability on a DoD website

A DoD website was misconfigured in a manner that could have allowed an attacker to collect sensitive information about the web application or system. @psychomantis was able to demonstrate this vulnerability by crafting a specially formatted URL. Thank you for notifying us of this vulnerability!...

CVE-2017-7433

An absolute path traversal vulnerability CWE-36 in Micro Focus Vibe 4.0.2 and earlier allows a remote authenticated attacker to download arbitrary files from the server by submitting a specially crafted request to the viewFile endpoint. Note that the attack can be performed without authentication...

PT-2017-17735

Name of the Vulnerable Software and Affected Versions Micro Focus Vibe versions 4.0.2 and earlier Description The issue allows a remote authenticated attacker to download arbitrary files from the server by submitting a specially crafted request to the "viewFile" endpoint. If Guest access is...

CVE-2017-7433: Improper Limitation of a Pathname to a Restricted Directory

An absolute path traversal vulnerability CWE-36 in Micro Focus Vibe 4.0.2 and earlier allows a remote authenticated attacker to download arbitrary files from the server by submitting a specially crafted request to the viewFile endpoint. Note that the attack can be performed without authentication...

Simple File Uploader - Arbitrary File Download Exploit

Exploit for php platform in category web applications Exploit Title: Simple File Uploader - Arbitrary File Download Date: 27/04/2017 Exploit Author: Daniel Godoy Vendor Homepage: https://codecanyon.net/ Software Link:...

Simple File Uploader - Arbitrary File Download

Simple File Uploader - Arbitrary File Download Exploit Title: Simple File Uploader - Arbitrary File Download Date: 27/04/2017 Exploit Author: Daniel Godoy Vendor Homepage: https://codecanyon.net/ Software Link:...

PHPCMS V9 arbitrary file download Windows

A, background Arbitrary File Download vulnerability and the PHPCMS v9. 6. 0 wap module SQL injection on in the same file, but the trigger point in the download function. Second, the details 漏洞文件在phpcms\modules\content\down.php vulnerability to trigger the function: php public function download th...