713 matches found
CVE-2016-10731: Improper Neutralization of Special Elements used in an SQL Command
ProjectSend formerly cFTP r582 allows SQL injection via manage-files.php with the request parameter status, manage-files.php with the request parameter files, clients.php with the request parameter selectedclients, clients.php with the request parameter status, process-zip-download.php with the...
PT-2018-14619
Name of the Vulnerable Software and Affected Versions SEMCMS version 3.4 Description A cross-site scripting XSS issue was found in the software. The issue is related to the "admin/SEMCMS Download.php" endpoint, specifically when the lgid parameter is set to "1" during editing. Recommendations For...
PT-2018-4899
Name of the Vulnerable Software and Affected Versions ProjectSend formerly cFTP version r582 Description The issue allows directory traversal via the file parameter in the "/process-zip-download.php" endpoint. This can be exploited by including ../ in the file parameter of the query string...
FLIR AX8 Thermal Camera 1.32.16 - Arbitrary File Disclosure Vulnerability
Exploit for hardware platform in category web applications Exploit Title: FLIR AX8 Thermal Camera 1.32.16 - Arbitrary File Disclosure Auhor: Gjoko 'LiquidWorm' Krstic Date: 2018-10-14 Vendor: FLIR Systems, Inc. Product web page: https://www.flir.com Affected version: Firmware: 1.32.16, 1.17.13 OS...
Joomla CW Article Attachments 1.0.6 SQL Injection
Exploit Title: Joomla! CW Article Attachments 1.0.6 - 'id' SQL Injection Date: 2018-09-20 Exploit Author: Haboob Team Software Link: https://extensions.joomla.org/extension/cw-article-attachments/ Version: below 1.0.6 CVE : CVE-2018-14592...
Joomla CW Article Attachments 1.0.6 - id SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla! CW Article Attachments 1.0.6 - 'id' SQL Injection Exploit Author: Haboob Team Software Link: https://extensions.joomla.org/extension/cw-article-attachments/ Version: below 1.0.6 CVE : CVE-2018-14592...
Sql injection
The CWJoomla CW Article Attachments PRO extension before 2.0.7 and CW Article Attachments FREE extension before 1.0.6 for Joomla! allow SQL Injection within download.php...
CVE-2018-14592
The CWJoomla CW Article Attachments PRO extension before 2.0.7 and CW Article Attachments FREE extension before 1.0.6 for Joomla! allow SQL Injection within download.php...
CVE-2018-14592
The CWJoomla CW Article Attachments PRO extension before 2.0.7 and CW Article Attachments FREE extension before 1.0.6 for Joomla! allow SQL Injection within download.php...
CVE-2018-14592: Improper Neutralization of Special Elements used in an SQL Command
The CWJoomla CW Article Attachments PRO extension before 2.0.7 and CW Article Attachments FREE extension before 1.0.6 for Joomla! allow SQL Injection within download.php...
PT-2018-12602
Name of the Vulnerable Software and Affected Versions CWJoomla CW Article Attachments PRO extension versions prior to 2.0.7 CW Article Attachments FREE extension versions prior to 1.0.6 Description The issue allows SQL Injection within the "download.php" endpoint. This could potentially lead to...
PT-2018-13784
Name of the Vulnerable Software and Affected Versions LG LNB, LND, LNU, and LNV smart network camera devices affected versions not specified Description The issue concerns broken access control in the devices, allowing attackers to download sensitive files without authentication. Specifically,...
Appnitro MachForm Path Traversal Vulnerability
Appnitro MachForm is a tool for creating responsive forms in web pages from Appnitro Software Indonesia. A path traversal vulnerability exists in Appnitro MachForm versions prior to 4.2.3. The vulnerability can be exploited to access arbitrary files on the system by sending the 'q' parameter to t...
Directory traversal
Roxy Fileman through v1.4.5 has Directory traversal via the php/download.php f parameter...
CVE-2018-12042
Roxy Fileman through v1.4.5 has Directory traversal via the php/download.php f parameter...
CVE-2018-12042
Roxy Fileman through v1.4.5 has Directory traversal via the php/download.php f parameter...
PT-2018-10964
Name of the Vulnerable Software and Affected Versions Roxy Fileman versions prior to 1.4.6 Description The issue allows for directory traversal via the "f" parameter in the php/download.php endpoint. Recommendations For Roxy Fileman versions prior to 1.4.6, update to version 1.4.6 or later to...
CVE-2018-12042: Improper Limitation of a Pathname to a Restricted Directory
Roxy Fileman through v1.4.5 has Directory traversal via the php/download.php f parameter...