CVE-2020-21786

In IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via /system/modules/dashboard/controllers/CronController.php...

CVE-2020-21786

In IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via /system/modules/dashboard/controllers/CronController.php...

CVE-2020-21786

CVE-2020-21786 affects IBOS 4.5.4 Open. The Arbitrary File Inclusion vulnerability allows getshell via /system/modules/dashboard/controllers/CronController.php. NVD records a base score of 7.5 (HIGH) under CVSS2 and 9.8 (CRITICAL) under CVSS3.1, indicating remote access with no authentication and...

CVE-2020-21786: Unrestricted Upload of File with Dangerous Type

In IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via /system/modules/dashboard/controllers/CronController.php...

PT-2021-10664

Name of the Vulnerable Software and Affected Versions: IBOS version 4.5.4 Description: The issue allows for Arbitrary File Inclusion, which can lead to getshell via the /system/modules/dashboard/controllers/CronController.php endpoint. Recommendations: For IBOS version 4.5.4, consider restricting...

CVE-2020-7790

This affects the package spatie/browsershot from 0.0.0. By specifying a URL in the file:// protocol an attacker is able to include arbitrary files in the resultant PDF...

PT-2020-19792

Name of the Vulnerable Software and Affected Versions spatie/browsershot versions 0.0.0 and later Description The issue allows an attacker to include arbitrary files in the resultant PDF by specifying a URL in the file:// protocol. This can lead to unauthorized access to sensitive information...

CVE-2020-7790: Improper Limitation of a Pathname to a Restricted Directory

This affects the package spatie/browsershot from 0.0.0. By specifying a URL in the file:// protocol an attacker is able to include arbitrary files in the resultant PDF...

TeamPass Path Traversal Vulnerability

TeamPass is an open source password manager from the developers of NILS LAUMAILL? software. A security vulnerability exists in TeamPass version 2.1.27.36. An attacker can exploit the vulnerability by sending an HTTP request with the 'newValue' parameter to the sources/users.series.php file to...

CVE-2020-4272: Improper Limitation of a Pathname to a Restricted Directory

IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted request specify a malicious file from a remote system, which could allow the attacker to execute arbitrary code on the vulnerable server. IBM X-ForceID:...

PT-2020-17964

Name of the Vulnerable Software and Affected Versions IBM QRadar versions 7.3.0 through 7.3.3 Patch 2 Description The issue allows a remote attacker to include arbitrary files by sending a specially-crafted request, which could enable the execution of arbitrary code on the vulnerable server. This...

PT-2020-7435

Name of the Vulnerable Software and Affected Versions: NetApp OnCommand System Manager versions 2.1 and earlier Description: The issue allows remote attackers to include arbitrary files through specially crafted requests to the "diagnostic" page using the SnapMirror log path parameter. This can b...

File Inclusion Vulnerability in hongcms

HongCMS Chinese and English website system is a lightweight free open source website system for building various types of Chinese and English websites, while it is a small development framework. hongcms file inclusion vulnerability , an attacker can exploit the vulnerability to arbitrarily includ...

CVE-2012-6652: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in pageflipbook.php script from index.php in Page Flip Book plugin for WordPress wppageflip allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pageflipbooklanguage parameter...

Elastic Kibana 5.0 <= 5.6.12 / 6.0 <= 6.4.2 Arbitrary File Inclusion Vulnerability - Linux

Kibana is prone to an arbitrary file inclusion flaw. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Elastic Kibana 5.0 <= 5.6.12 / 6.0 <= 6.4.2 Arbitrary File Inclusion Vulnerability - Windows

Kibana is prone to an arbitrary file inclusion flaw. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

ISPConfig Arbitrary File Inclusion (CVE-2018-17984)

An arbitrary file inclusion vulnerability exists in ISPConfig. This vulnerability is due to insufficient validation of user input. Successful exploitation results in RCE under the security context of the target application...

Design/Logic Flaw

Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with...

CVE-2018-17246

Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with...

CVE-2018-17246

Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with...