8091 matches found
CVE-2022-26271
74cmsSE v3.4.1 was discovered to contain an arbitrary file read vulnerability via the $url parameter at \index\controller\Download.php...
CVE-2022-26271
74cmsSE v3.4.1 was discovered to contain an arbitrary file read vulnerability via the $url parameter at \index\controller\Download.php...
CVE-2022-26271
74cmsSE v3.4.1 was discovered to contain an arbitrary file read vulnerability via the $url parameter at \index\controller\Download.php...
CVE-2022-26271
CVE-2022-26271 affects 74cmsSE v3.4.1. The vulnerability is an arbitrary file read located in index/controller/Download.php, exploitable via the $url parameter. Impact: potential unauthorized access to sensitive information. Root cause: improper handling of the Download.php URL parameter allows r...
EUVD-2022-30832
74cmsSE v3.4.1 was discovered to contain an arbitrary file read vulnerability via the $url parameter at \index\controller\Download.php...
Admin Word Count Column <= 2.2 - Unauthenticated Arbitrary File Read
The plugin does not validate the path parameter given to readfile, which could allow unauthenticated attackers to read arbitrary files on server running old version of PHP susceptible to the null byte technique. This could also lead to RCE by using a Phar Deserialization technique...
Admin Word Count Column <= 2.2 - Unauthenticated Arbitrary File Read
The plugin does not validate the path parameter given to readfile, which could allow unauthenticated attackers to read arbitrary files on server running old version of PHP susceptible to the null byte technique. This could also lead to RCE by using a Phar Deserialization technique PoC...
迅易科技 74cms 安全漏洞
Xunyi Technology 74cms is a PHP and MySQL based online recruitment system from China Xunyi Technology Company. A security vulnerability exists in 74cmsSE v3.4.1, which was discovered via the $url parameter in indexcontrollerDownload.php. 74cmsSE v3.4.1 contains an arbitrary file read vulnerabilit...
PT-2022-11760 · Adminer · Adminer
Name of the Vulnerable Software and Affected Versions: Adminer versions 1.12.0 through 4.6.2 Description: The issue allows an attacker to achieve arbitrary file read on a remote server by requesting Adminer to connect to a remote MySQL database, due to improper access control. Recommendations: Fo...
Jolokia Arbitrary File Read
Jolokia is a JMX-HTTP bridge giving an alternative to JSR-160 connectors. Jolokia includes a compilerDirectivesAdd action, which allows an unauthenticated attacker to read arbitrary files on the server. No source data...
Mageia: Security Advisory (MGASA-2022-0110)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2022-0110 Updated sphinx packages fix security vulnerability
It was found that sphinx could allow arbitrary files to be read by abusing a configuration option. CVE-2020-29050...
WordPress Amministrazione Aperta 3.7.3 Arbitrary File Read
Exploit Title: WordPress Plugin amministrazione-aperta 3.7.3 - Local File Read - Unauthenticated Google Dork: inurl:/wp-content/plugins/amministrazione-aperta/ Date: 23-03-2022 Exploit Author: Hassan Khan Yusufzai - Splint3r7 Vendor Homepage: https://wordpress.org/plugins/amministrazione-aperta/...
workflow-cps-global-lib: Pipeline-related plugins follow symbolic links or do not limit path names
A flaw was found in Jenkins. The Pipeline: Shared Groovy Libraries does not restrict the names of resources passed to the libraryResource step. This flaw allows attackers who can configure Pipelines to read arbitrary files on the Jenkins controller file system...
Insecure Access Control
HashiCorp has insecure access control. The vulnerability exists due to a lack of sanitization of the authorization allowing an attacker with read-fs and alloc-exec or job-submit capabilities to read arbitrary files on the host filesystem as root...
Arbitrary file read vulnerability in Jenkins kubernetes-cd Plugin
Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows users with Credentials/Create permission to read arbitrary files on the Jenkins controller...
CVE-2022-25497
CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function...
CVE-2022-25497
CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function...
