Trend Micro Control Manager download.php Information Disclosure

An information disclosure vulnerability exists in Trend Micro Control Manager. The vulnerability is due to security misconfiguration which allows access to the unreferenced download.php file, which in turn allow reading of the arbitrary files...

skymetweather.com XSS vulnerability

Vulnerable URL: http://www.skymetweather.com/download.php?filename=prompt/OPENBUGBOUNTY/...

phpatm.org XSS vulnerability

Vulnerable URL: http://phpatm.org/download.php?direction="order=nom=test Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5712013 VIP website status:| No Check phpatm.org SSL...

megafiletube.unblocked.onl XSS vulnerability

Vulnerable URL: https://megafiletube.unblocked.onl/download.php?id=19384"--!" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

Collabo - Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: Collabo - TeamBusiness Collaboration Network - Arbitrary File Download Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://321-internet.com/ Software Buy:...

FTP Made Easy PRO 1.2 - Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: FTP Made Easy PRO Script v1.2 - Arbitrary File Download Google Dork: N/A Date: 07.02.2017 Vendor Homepage: http://nelliwinne.net/ Software Buy:...

Schoolhos CMS 'download.php' SQL Injection Vulnerability

Schoolhos CMS is a free and open source content management system. A SQL injection vulnerability exists in download.php in Schoolhos CMS version 2.29, which can be exploited by an attacker to compromise the application, access or modify data, or exploit a potential vulnerability in the underlying...

Schoolhos CMS 2.29 - Remote Code Execution / SQL Injection

\x0d\x0a-----------------------------26518470919255\x0d\x0a\x0d\x0a' \ 'http://HOST/PATH/elearningku/proses.php?pilih=guru&untukdi=upload' php file can be c...

Arbitrary File Download Vulnerability in Mixcall Attendant Management System File Parameter

Mixcall seat management system is based on B/S architecture, the management personnel can directly log into the Mixcall seat management center through the computer, and view the detailed situation related to the seat personnel's voice services. An arbitrary file download vulnerability exists in t...

seaplane.aero XSS vulnerability

Vulnerable URL: http://www.seaplane.aero/images/pdf/download.php?name=FlyerMBLFBodeneffektfahrzeugINAvia.pdf" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 23283531 VIP website...

DVFolderContent Module 'download.php' local file inclusion vulnerability in Joomla!

Joomla! is an open source content management system CMS. A local file inclusion vulnerability exists in the Joomla! DVFolderContent Module 'download.php' due to a failure to adequately clean user input data. An attacker could exploit this vulnerability to obtain sensitive information or execute...

casip.bandungkab.go.id XSS vulnerability

Vulnerable URL: http://casip.bandungkab.go.id/download.php?id=prompt'OPENBUGBOUNTY'...

wordpress force force-download.php parameter file arbitrary File Download vulnerability

No description provided by source...

ZTE enterprise gateway system modules/system/download.php arbitrary File Download vulnerability

No description provided by source...

ZTE gateway device /modules/service/download.php the file id parameter local file include vulnerability

No description provided by source...

Webnet CMS download.php parameters filename arbitrary File Download vulnerability

No description provided by source...

XuezhuLi FileSharing - Directory Traversal

XuezhuLi FileSharing - Directory Traversal Exploit Title: XuezhuLi FileSharing - Path Traversal Vulnerability Date: 2016-06-23 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: https://github.com/XuezhuLi Software Link:...

XuezhuLi FileSharing - Directory Traversal

Exploit Title: XuezhuLi FileSharing - Path Traversal Vulnerability Date: 2016-06-23 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: https://github.com/XuezhuLi Software Link: https://github.com/XuezhuLi/FileSharing/archive/master.zip Version: Latest commit Tested on:...

XuezhuLi FileSharing Path Traversal

Exploit Title: XuezhuLi FileSharing - Path Traversal Vulnerability Date: 2016-06-23 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: https://github.com/XuezhuLi Software Link: https://github.com/XuezhuLi/FileSharing/archive/master.zip Version: Latest commit Tested on:...

Arbitrary File Traversal Vulnerability in Reporter System of Shanghai Bingfeng Computer Network Technology Co.

Shanghai Bingfeng Computer Network Technology Co., Ltd. is a domestic VPN, Traffic Management, Behavior Management, Link Load Balancing, Next Generation Firewall equipment supplier and IT value solution provider. Bingfeng network reporter system is a set of data report management system. Shanghai...