654 matches found
CVE-2017-9067
In MODX Revolution before 2.5.7, when PHP 5.3.3 is used, an attacker is able to include and execute arbitrary files on the web server due to insufficient validation of the action parameter to setup/index.php, aka directory traversal...
PT-2017-10403
Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 7.1 through 7.6 Description The issue allows a remote attacker to include arbitrary files by sending a specially-crafted URL request. This could enable the attacker to execute arbitrary code on the vulnerab...
CVE-2016-9976: Improper Access Control
IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL request, which could allow the attacker to execute arbitrary code on the vulnerable server. IBM X-Force ID: 120252...
PT-2017-9871
Name of the Vulnerable Software and Affected Versions IBM Tivoli Application Dependency Discovery Manager versions 7.2.2 through 7.3 Description The issue allows a remote attacker to include arbitrary files, potentially enabling the attacker to read any file on the system. Recommendations For...
CVE-2016-8925: Exposure of Sensitive Information to an Unauthorized Actor
IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could allow a remote attacker to include arbitrary files which could allow the attacker to read any file on the system. IBM X-Force ID: 118538...
U.S. Dept Of Defense: Path traversal on ████████
Summary: The web application hosted on the "█████████" domain is affected by a path traversal vulnerability that could permit to an attacker to include arbirtary files that are outside of the restricted directory. Description: The affected handler is the "/html/js/editor/editor.jsp". This handler...
CVE-2014-8704: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in Wonder CMS 2014 allows remote attackers to include and execute arbitrary local files via a crafted theme...
Arbitrary File Containment Vulnerability in UFIDA Financials
UFIDA Financials is a financial management software. UFIDA Financial System has an arbitrary file inclusion vulnerability. The vulnerability url is: http://target/TaskManager/TaskServiceServlet?m=1&taskname=... /... /WEB-INF/web.xml%00, attackers can use the vulnerability to obtain database...
Arbitrary File Containment Vulnerability in VoIP Operation Support System of Kunshi Network Technology Co.
The VoIP operation support system of Kunshi Network Technology Co., Ltd. is a support system for small and medium-sized VoIP operation business. The product suffers from an arbitrary file inclusion vulnerability, which can be exploited by an attacker to read sensitive files such as the service...
phpmyadmin2. 8. 0. 3 arbitrary file include vulnerability
0x00 overview phpmyadmin vulnerability exists in the known version is 2.8.0.3 rest version unknown This test version is 2. 8. 0. 3 Many within the network system in this version, the external network is also not a few! 0x01 vulnerability analysis See there are holes in the file code...
dzzoffice 任意文件包含
No description provided by source...
Zen Cart 1.5.4 Local File Inclusion
Advisory ID: HTB23282 Product: Zen Cart Vendor: Zen Ventures, LLC Vulnerable Versions: 1.5.4 Tested Version: 1.5.4 Advisory Publication: November 25, 2015 without technical details Vendor Notification: November 25, 2015 Vendor Patch: November 26, 2015 Public Disclosure: December 16, 2015...
Zen Cart Arbitrary File Inclusion Vulnerability
Zen Cart is open source shopping cart software. An arbitrary file inclusion vulnerability exists in Zen Cart. Due to a lack of filtering in the "/ajax.php" script directory traversal sequence in the "act" HTTP GET parameter, an attacker can exploit the vulnerability to execute arbitrary PHP code...
Multiple Vulnerabilities in ZKN Cyber Sentinel
ZKXY Network Sentinel is an Internet security auditing system that integrates behavioral auditing and content auditing, and is deployed as a bypass at the network egress. ZKXN Network Sentry suffers from arbitrary file inclusion and arbitrary command execution vulnerabilities. The vulnerability...
U-Mail Mail System Arbitrary File Containment Vulnerability
U-mail is a mail service system. The U-Mail mail system suffers from an arbitrary file inclusion vulnerability, which allows an attacker to exploit the vulnerability to download and view arbitrary files and obtain sensitive server information...
CVE-2015-7815: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in core/ViewDataTable/Factory.php in Piwik before 2.15.0 allows remote attackers to include and execute arbitrary local files via the viewDataTable parameter...
Arbitrary File Containment Vulnerability in Polycom's (Polycom, Inc) Polycom RMX Family of Products
Polycom's PolycomRMX family of products are multipoint video conferencing system servers that provide easy-to-manage multipoint video and integrated conferencing services for next-generation real-time media conferencing platforms. The series of products have an arbitrary file inclusion...
CVE-2015-7372: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in delivery-dev/al.php in Revive Adserver before 3.2.2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the layerstyle parameter...
