Directory Traversal

moodle/moodle is vulnerable to directory traversal. It does not validate the path used to import a lesson question, allowing an authorized user to cause an arbitrary file read via this feature...

GHSA-PGM5-CR62-PRXQ Moodle Arbitrary file read when importing lesson questions

The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions. This insufficient path checks results in arbitrary file read risk. This vulnerability allows a remote attacker to perform directory traversal attacks. The capability to access this feature...

Moodle Arbitrary file read when importing lesson questions

The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions. This insufficient path checks results in arbitrary file read risk. This vulnerability allows a remote attacker to perform directory traversal attacks. The capability to access this feature...

Moodle <= 3.9.14, 3.10 <= 3.11.7, 4.0 <= 4.0.1 Multiple Vulnerabilities

Moodle is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

WordPress MultiSafepay plugin for WooCommerce Arbitrary File Read Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. An arbitrary file read vulnerability exists in the WordPress MultiSafepay plugin for WooCommerce 4.13.1 and prior versions, which stems from...

Design/Logic Flaw

The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions. This insufficient path checks results in arbitrary file read risk. This vulnerability allows a remote attacker to perform directory traversal attacks. The capability to access this feature...

UBUNTU-CVE-2022-35650

The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions. This insufficient path checks results in arbitrary file read risk. This vulnerability allows a remote attacker to perform directory traversal attacks. The capability to access this feature...

CVE-2022-35650

CVE-2022-35650 affects Moodle and is due to an input validation error when importing lesson questions, causing insufficient path checks and enabling arbitrary file read via directory traversal. The vulnerability is described as exploitable by a remote attacker to perform directory traversal, with...

CVE-2022-35650

The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions. This insufficient path checks results in arbitrary file read risk. This vulnerability allows a remote attacker to perform directory traversal attacks. The capability to access this feature...

PT-2022-9059 · Snyk · Snyk-Broker

Name of the Vulnerable Software and Affected Versions: snyk-broker versions prior to 4.73.0 Description: The issue allows arbitrary file reads for users with access to Snyk's internal network via directory traversal. Recommendations: For versions prior to 4.73.0, update to version 4.73.0 or later...

snyk-broker 路径遍历漏洞

snyk-broker is a proxy program for access between snyk.io and Git repositories. A security vulnerability exists in snyk-broker versions prior to 4.73.0, which stems from the package's susceptibility to directory traversal, and can be exploited by an attacker to access read arbitrary files...

CVE-2022-33901 WordPress MultiSafepay plugin for WooCommerce plugin <= 4.13.1 - Unauthenticated Arbitrary File Read vulnerability

Unauthenticated Arbitrary File Read vulnerability in MultiSafepay plugin for WooCommerce plugin = 4.13.1 at WordPress...

CVE-2022-33901

CVE-2022-33901 : WordPress MultiSafepay for WooCommerce plugin

WordPress plugin MultiSafepay plugin for WooCommerce 安全漏洞

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. An arbitrary file read vulnerability exists in the WordPress MultiSafepay plugin for WooCommerce 4.13.1 and prior versions, which stems from...

CVE-2022-31475

Authenticated custom plugin role Arbitrary File Read via Export function vulnerability in GiveWP's GiveWP plugin = 2.20.2 at WordPress...

CVE-2022-31475

Authenticated custom plugin role Arbitrary File Read via Export function vulnerability in GiveWP's GiveWP plugin = 2.20.2 at WordPress...

Design/Logic Flaw

Authenticated custom plugin role Arbitrary File Read via Export function vulnerability in GiveWP's GiveWP plugin = 2.20.2 at WordPress...

CVE-2022-31475

CVE-2022-31475 affects the GiveWP WordPress plugin and concerns an authenticated arbitrary file read via the export function in versions

CVE-2022-31475 WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Read via Export function vulnerability

Authenticated custom plugin role Arbitrary File Read via Export function vulnerability in GiveWP's GiveWP plugin = 2.20.2 at WordPress...

CVE-2022-31475 WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Read via Export function vulnerability

Authenticated custom plugin role Arbitrary File Read via Export function vulnerability in GiveWP's GiveWP plugin = 2.20.2 at WordPress...