8014 matches found
Files or Directories Accessible to External Parties
Overview Affected versions of this package are vulnerable to Files or Directories Accessible to External Parties via the src tag. An attacker can read arbitrary files from the server's file system. Remediation Upgrade tecnickcom/tcpdf to version 6.7.6 or higher. References - GitHub Commit Credit:...
CVE-2024-10857 Product Input Fields for WooCommerce <= 1.9 - Authenticated (Contributor+) Arbitrary File Read
The Product Input Fields for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.9 via the handledownloads function due to insufficient file path validation/sanitization. This makes it possible for authenticated attackers, with...
Arbitrary File Read Vulnerability in UFIDA NC at UFIDA Network Technology Co.
UFIDA NC is a large erp enterprise management system and e-commerce platform. UFIDA NC suffers from an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...
Sitecore 8.x < 10.4 Arbitrary File Read
Sitecore CMS version 8.x 10.4 are affected by an incorrect path access check vulnerability allowing unauthenticated remote attackers to read arbitrary files on the affected host. No source data...
WordPress plugin Product Input Fields for WooCommerce 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...
WordPress Product Input Fields for WooCommerce plugin <= 1.9 - Authenticated (Contributor+) Arbitrary File Read vulnerability
Authenticated Contributor+ Arbitrary File Read vulnerability discovered by 1337Wannabe in WordPress Plugin Product Input Fields for WooCommerce versions = 1.9...
WordPress MP3 Sticky Player plugin <= 8.0 - Unauthenticated Arbitrary File Read/Download vulnerability
Unauthenticated Arbitrary File Read/Download vulnerability discovered by Tonn in WordPress Plugin MP3 Sticky Player versions = 8.0...
CVE-2024-10803
CVE-2024-10803 – MP3 Sticky Player (WordPress) vulnerability : All versions up to and including 8.0 are vulnerable to Directory Traversal via content/downloader.php, allowing unauthenticated attackers to read arbitrary server files. This matches the assessment from Patchstack/Wordfence indicating...
CVE-2024-10803 MP3 Sticky Player <= 8.0 - Unauthenticated Arbitrary File Read/Download
The MP3 Sticky Player plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.0 via the content/downloader.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...
CVE-2024-10803 MP3 Sticky Player <= 8.0 - Unauthenticated Arbitrary File Read/Download
The MP3 Sticky Player plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.0 via the content/downloader.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...
CVE-2024-52726
CRMEB v5.4.0 is vulnerable to Arbitrary file read in the savebasics function which allows an attacker to obtain sensitive information...
CVE-2024-52726
CRMEB v5.4.0 is vulnerable to Arbitrary file read in the savebasics function which allows an attacker to obtain sensitive information...
ZhongBangKeJi CRMEB 安全漏洞
ZhongBangKeJi CRMEB is an open source e-commerce management system from China ZhongBang Technology ZhongBangKeJi. A security vulnerability exists in ZhongBangKeJi CRMEB v5.4.0, which originates from an arbitrary file read vulnerability in the savebasics function. An attacker can exploit this...
CVE-2024-52726
CRMEB v5.4.0 is vulnerable to Arbitrary file read in the savebasics function which allows an attacker to obtain sensitive information...
CVE-2024-52726
CRMEB v5.4.0 is vulnerable to Arbitrary file read in the savebasics function which allows an attacker to obtain sensitive information...
PT-2024-35421 · Crmeb · Crmeb
Name of the Vulnerable Software and Affected Versions: CRMEB version 5.4.0 Description: The issue allows an attacker to obtain sensitive information through an arbitrary file read in the save basics function. Recommendations: For CRMEB version 5.4.0, consider restricting access to the save basics...
CVE-2024-52726
CRMEB v5.4.0 is vulnerable to an Arbitrary file read in the save_basics function, enabling an attacker to obtain sensitive information. The vulnerability is consistently described across varied sources (Red Hat, NVD, OSV, CIRCL, CNNVD, CVE lists) as a flaw in the save_basics routine, but concrete...
WordPress Jobify theme < 4.3.0 - Unauthenticated Arbitrary File Read vulnerability
Unauthenticated Arbitrary File Read vulnerability discovered by Ananda Dhakal Patchstack in WordPress Theme Jobify versions 4.3.0...
CVE-2021-1232
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on the underlying filesystem of an affected system. This vulnerability is due to insufficient access control for sensitive information that ...