CVE-2017-1002004: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in wordpress plugin DTracker v1.5, In file ./dtracker/download.php user input isn't sanitized via the id variable before adding it to the end of an SQL query...

PT-2017-10993

Name of the Vulnerable Software and Affected Versions DTracker version 1.5 Description The issue concerns a lack of input sanitization in the DTracker plugin for WordPress. Specifically, in the file ./dtracker/download.php, user input via the id variable is not properly sanitized before being add...

PT-2017-10997

Name of the Vulnerable Software and Affected Versions membership-simplified-for-oap-members-only version 1.58 Description The issue concerns a lack of proper access control in the file download functionality. Specifically, the download.php file in the membership-simplified-for-oap-members-only...

PT-2017-7554

Name of the Vulnerable Software and Affected Versions AlegroCart version 1.2.8 Description The issue allows remote administrators to execute arbitrary SQL commands via the download parameter in the check download and possibly check filename function in upload/admin2/model/products/model admin...

CVE-2017-13780

The EyesOfNetwork web interface aka eonweb 5.1-0 allows directory traversal attacks for reading arbitrary files via the module/adminconf/download.php file parameter...

CVE-2017-13780

The EyesOfNetwork web interface aka eonweb 5.1-0 allows directory traversal attacks for reading arbitrary files via the module/adminconf/download.php file parameter...

CVE-2017-13780: Improper Limitation of a Pathname to a Restricted Directory

The EyesOfNetwork web interface aka eonweb 5.1-0 allows directory traversal attacks for reading arbitrary files via the module/adminconf/download.php file parameter...

PT-2017-13096

Name of the Vulnerable Software and Affected Versions EyesOfNetwork web interface aka eonweb versions 5.1-0 Description The issue allows directory traversal attacks, enabling the reading of arbitrary files. This is achieved via the file parameter in the module/admin conf/download.php API endpoint...

CVE-2015-7517: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Double Opt-In for Download plugin before 2.0.9 for WordPress allow remote attackers to execute arbitrary SQL commands via the ver parameter to 1 class-doifd-download.php or 2 class-doifd-landing-page.php in public/includes/...

PT-2017-7210

Name of the Vulnerable Software and Affected Versions Double Opt-In for Download plugin versions prior to 2.0.9 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the ver parameter to specific API endpoints, including class-doifd-download.php and...

Dzzoffice v1.3.1 Arbitrary File Download Vulnerability in Multiple Pages

DzzOffice is an open source cloud storage management tool. Dzzoffice v1.3.1 Arbitrary file download vulnerability exists in the 'pdfviewer.php', 'view.php', 'download.php' and 'attachment.php' pages, which can be exploited by attackers to obtain sensitive information...

PT-2017-6810

Name of the Vulnerable Software and Affected Versions MantisBT versions 1.2.19 and earlier Description The issue allows remote authenticated users to download attachments linked to arbitrary private projects. This is possible when the threshold to access files is set to ANYBODY. The file id...

PT-2017-6794

Name of the Vulnerable Software and Affected Versions Download Zip Attachments plugin version 1.0 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by including a .. dot dot in the File parameter to the "download.php" endpoint...

PT-2017-6862

Name of the Vulnerable Software and Affected Versions MDC YouTube Downloader plugin version 2.1.0 for WordPress Description The issue allows remote attackers to read arbitrary files by providing a full pathname in the file parameter to the "includes/download.php" endpoint. Recommendations For MDC...

PT-2017-6871

Name of the Vulnerable Software and Affected Versions Image Export plugin version 1.1 for WordPress Description The issue allows remote attackers to read and delete arbitrary files by providing a full pathname in the file parameter to the "download.php" endpoint. Recommendations For Image Export...

CVE-2015-5468: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the WP e-Commerce Shop Styling plugin before 2.6 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter to includes/download.php...

CVE-2015-5609: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in the Image Export plugin 1.1 for WordPress allows remote attackers to read and delete arbitrary files via a full pathname in the file parameter to download.php...

CVE-2015-5469: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in the MDC YouTube Downloader plugin 2.1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file parameter to includes/download.php...

PT-2017-6861

Name of the Vulnerable Software and Affected Versions WP e-Commerce Shop Styling plugin versions prior to 2.6 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the filename parameter to the...

Synology Photo Station Directory Traversal Vulnerability (CNVD-2017-06921)

Synology Photo Station is a solution for sharing pictures, videos and blogs over the Internet from Synology, a Chinese company. A directory traversal vulnerability exists in the download.php file in Synology Photo Station versions prior to 6.5.3-3226. A remote attacker can exploit the vulnerabili...