CVE-2023-29962

S-CMS v5.0 was discovered to contain an arbitrary file read vulnerability...

CVE-2023-29962

S-CMS v5.0 was discovered to contain an arbitrary file read vulnerability...

CVE-2023-29962

S-CMS v5.0 was discovered to contain an arbitrary file read vulnerability...

CVE-2023-29962

S-CMS v5.0 was discovered to contain an arbitrary file read vulnerability...

CVE-2023-29962

CVE-2023-29962 affects S-CMS v5.0 and is described as an arbitrary file read vulnerability. Technical details in connected documents confirm the issue targets S-CMS v5.0, with a network-based attack vector, low privileges required, and no user interaction, leading to high confidentiality impact (...

S-CMS Security Vulnerabilities

S-CMS is a content management system CMS based on PHP and MySQL from China S-CMS Company. A security vulnerability exists in S-CMS v5.0, which originates from an arbitrary file read vulnerability in /WWW/admin/data.php...

GHSA-CRWJ-2R3C-GX2G Apache InLong Manager Arbitrary File Read Vulnerability

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack using mysql driver. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1 ...

Apache InLong Manager Arbitrary File Read Vulnerability

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack using mysql driver. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1 ...

CVE-2023-51785

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack using mysql driver. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1 ...

CVE-2023-51785

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack using mysql driver. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1 ...

Deserialization of untrusted data

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack using mysql driver. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1 ...

CVE-2023-51785 Apache InLong: Arbitrary File Read Vulnerability in Apache InLong Manager

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack using mysql driver. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1 ...

CVE-2023-51785 Apache InLong: Arbitrary File Read Vulnerability in Apache InLong Manager

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack using mysql driver. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1 ...

CVE-2023-45722

HCL DRYiCE MyXalytics is impacted by path traversal arbitrary file read vulnerability because it uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory. The product does not properly neutralize special...

CVE-2023-45722

HCL DRYiCE MyXalytics is impacted by path traversal arbitrary file read vulnerability because it uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory. The product does not properly neutralize special...

CVE-2023-45722 Path Traversal Arbitrary File Read affects DRYiCE MyXalytics

HCL DRYiCE MyXalytics is impacted by path traversal arbitrary file read vulnerability because it uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory. The product does not properly neutralize special...

Chinese Perpetual Calendar Security Vulnerability

Chinese Perpetual Calendar 微鲤万年历 is a mobile calendar application. A security vulnerability exists in Chinese Perpetual Calendar version v9.0.0, which originates from an arbitrary file read vulnerability in the openFile method...

GHSA-3GJC-MP82-FJ4Q Duplicate Advisory: TYPO3 Arbitrary File Read via Directory Traversal

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-w6x2-jg8h-p6mp. This link is maintained to preserve external references. Original Description In TYPO3 11.5.24, the filelist component allows attackers who have access to the administrator panel to read arbitrar...

Duplicate Advisory: TYPO3 Arbitrary File Read via Directory Traversal

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-w6x2-jg8h-p6mp. This link is maintained to preserve external references. Original Description In TYPO3 11.5.24, the filelist component allows attackers who have access to the administrator panel to read arbitrar...

CVE-2023-30451

In TYPO3 11.5.24, the filelist component allows attackers who have access to the administrator panel to read arbitrary files via directory traversal in the baseuri field, as demonstrated by POST /typo3/record/edit with ../../../ in datasysfilestoragedatasDEFlDEFbasePathvDEF...