713 matches found
CVE-2016-10331
Directory traversal vulnerability in download.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to read arbitrary files via a full pathname in the id parameter...
PT-2017-7868
Name of the Vulnerable Software and Affected Versions Synology Photo Station versions prior to 6.5.3-3226 Description The issue allows remote attackers to read arbitrary files via a full pathname in the id parameter in the "download.php" file. Recommendations For versions prior to 6.5.3-3226,...
CVE-2016-10331: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in download.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to read arbitrary files via a full pathname in the id parameter...
GeoMoose <=2.9.2 /php/download.php parameter ext arbitrary file read vulnerability
No description provided by source...
Trend Micro Control Manager download.php Information Disclosure
An information disclosure vulnerability exists in Trend Micro Control Manager. The vulnerability is due to security misconfiguration which allows access to the unreferenced download.php file, which in turn allow reading of the arbitrary files...
skymetweather.com XSS vulnerability
Vulnerable URL: http://www.skymetweather.com/download.php?filename=prompt/OPENBUGBOUNTY/...
phpatm.org XSS vulnerability
Vulnerable URL: http://phpatm.org/download.php?direction="order=nom=test Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5712013 VIP website status:| No Check phpatm.org SSL...
megafiletube.unblocked.onl XSS vulnerability
Vulnerable URL: https://megafiletube.unblocked.onl/download.php?id=19384"--!" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...
Collabo - Arbitrary File Download Vulnerability
Exploit for php platform in category web applications Exploit Title: Collabo - TeamBusiness Collaboration Network - Arbitrary File Download Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://321-internet.com/ Software Buy:...
FTP Made Easy PRO 1.2 - Arbitrary File Download Vulnerability
Exploit for php platform in category web applications Exploit Title: FTP Made Easy PRO Script v1.2 - Arbitrary File Download Google Dork: N/A Date: 07.02.2017 Vendor Homepage: http://nelliwinne.net/ Software Buy:...
Schoolhos CMS 'download.php' SQL Injection Vulnerability
Schoolhos CMS is a free and open source content management system. A SQL injection vulnerability exists in download.php in Schoolhos CMS version 2.29, which can be exploited by an attacker to compromise the application, access or modify data, or exploit a potential vulnerability in the underlying...
Schoolhos CMS 2.29 - Remote Code Execution / SQL Injection
\x0d\x0a-----------------------------26518470919255\x0d\x0a\x0d\x0a' \ 'http://HOST/PATH/elearningku/proses.php?pilih=guru&untukdi=upload' php file can be ccessed via : http://HOST/PATH/file/mater...
Arbitrary File Download Vulnerability in Mixcall Attendant Management System File Parameter
Mixcall seat management system is based on B/S architecture, the management personnel can directly log into the Mixcall seat management center through the computer, and view the detailed situation related to the seat personnel's voice services. An arbitrary file download vulnerability exists in t...
seaplane.aero XSS vulnerability
Vulnerable URL: http://www.seaplane.aero/images/pdf/download.php?name=FlyerMBLFBodeneffektfahrzeugINAvia.pdf" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 23283531 VIP website...
DVFolderContent Module 'download.php' local file inclusion vulnerability in Joomla!
Joomla! is an open source content management system CMS. A local file inclusion vulnerability exists in the Joomla! DVFolderContent Module 'download.php' due to a failure to adequately clean user input data. An attacker could exploit this vulnerability to obtain sensitive information or execute...
casip.bandungkab.go.id XSS vulnerability
Vulnerable URL: http://casip.bandungkab.go.id/download.php?id=prompt'OPENBUGBOUNTY'...
wordpress force force-download.php parameter file arbitrary File Download vulnerability
No description provided by source...
ZTE enterprise gateway system modules/system/download.php arbitrary File Download vulnerability
No description provided by source...