oretnom23 file-management-system-php input validation error vulnerability

The oretnom23 file-management-system-php versions 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4 and earlier contain a security vulnerability. This vulnerability stems from improper handling of the ID parameter by the readfile function in the download.php file of the File Download component, potentiall...

CVE-2014-125133

NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the file parameter of download.php. Attackers can send GET requests with directory traversal sequences in the file parameter to retrieve...

CVE-2014-125133 NativeChurch WordPress Theme < 1.6.2 Arbitrary File Download via download.php

NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the file parameter of download.php. Attackers can send GET requests with directory traversal sequences in the file parameter to retrieve...

CVE-2014-125133

The NativeChurch theme for WordPress (versions before 1.6.2 ) is vulnerable to a path traversal vulnerability. Unauthenticated attackers can exploit the file parameter of download.php by sending GET requests containing directory traversal sequences. This allows for the arbitrary download of sensi...

CVE-2014-125133 NativeChurch WordPress Theme < 1.6.2 Arbitrary File Download via download.php

NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the file parameter of download.php. Attackers can send GET requests with directory traversal sequences in the file parameter to retrieve...

EUVD-2014-9826

NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the file parameter of download.php. Attackers can send GET requests with directory traversal sequences in the file parameter to retrieve...

PT-2026-118677

Name of the Vulnerable Software and Affected Versions NativeChurch theme for WordPress versions prior to 1.6.2 Description An issue allows unauthenticated attackers to download arbitrary files via the 'download.php' endpoint. By sending GET requests containing directory traversal sequences in the...

VulnCheck KEV: CVE-2014-125133

NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the file parameter of download.php. Attackers can send GET requests with directory traversal sequences in the file parameter to retrieve...

Imithemes NativeChurch path traversal vulnerability

Versions prior to 1.6.2 of imithemes NativeChurch contain a path traversal vulnerability. This vulnerability allows unauthenticated attackers to send GET requests containing directory traversal sequences via the file parameter in download.php. As a result, they can download arbitrary files and...

PT-2026-118680

Name of the Vulnerable Software and Affected Versions Aspose Importer & Exporter plugin for WordPress versions prior to 3.0 Description A path traversal issue allows unauthenticated attackers to download arbitrary files. This occurs because the file parameter is not properly sanitized. Attackers...

PT-2026-118681

Name of the Vulnerable Software and Affected Versions Aspose PDF Exporter plugin for WordPress versions prior to 2.0 Description An issue exists where unauthenticated attackers can download files by exploiting a path traversal flaw. This occurs because the file parameter passed to the readfile...

PT-2026-118679

Name of the Vulnerable Software and Affected Versions Aspose Doc Exporter plugin for WordPress versions prior to 2.0 Description An issue allows unauthenticated attackers to download arbitrary files by passing unsanitized paths to the readfile function. This is achieved by sending GET requests to...

CVE-2014-125133: Improper Limitation of a Pathname to a Restricted Directory

NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the file parameter of download.php. Attackers can send GET requests with directory traversal sequences in the file parameter to retrieve...

PT-2026-110503

A vulnerability was detected in SEMCMS up to 5.0. This affects an unknown function of the file SEMCMS Download.php. Performing a manipulation results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about...

PT-2026-104416

Name of the Vulnerable Software and Affected Versions CodeArt Google MP3 Audio Player plugin google-mp3-audio-player versions prior to 1.0.12 Description An unauthenticated arbitrary file read issue exists where remote attackers can retrieve sensitive files. This is achieved by supplying a...

Exploit-Machine

Analisis Kerentanan — Canto HackMyVM Breakdown alur exploit...

Sangfor Application - download.php File Read

Reads arbitrary files via Sangfor Application /report/download.php?pdf= traversal. !/usr/bin/env python3 -- coding: utf-8 -- """Sangfor Application download.php pdf parameter file read.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.protocols.http.lfi...

AMSI - download.php Path Traversal Detection

Detects AMSI download.php?file= path traversal to /etc/passwd requires amsiweb/amsimoodle markers. !/usr/bin/env python3 -- coding: utf-8 -- """AMSI download.php path traversal.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

OSSIM - repository/download.php LFI Detection

Detects OSSIM LFI via repository/download.php?file=../../../../etc/passwd. !/usr/bin/env python3 -- coding: utf-8 -- """Detects OSSIM LFI via repository/download.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

TYPO3 - download.php localconf.php Disclosure Detection

Detects TYPO3 fileadmin/download.php LFI reading typo3conf/localconf.php TYPO3CONFVARS / typodbpassword. !/usr/bin/env python3 -- coding: utf-8 -- """Detects TYPO3 fileadmin/download.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...