CVE-2022-28002: Files or Directories Accessible to External Parties

Movie Seat Reservation v1 was discovered to contain an unauthenticated file disclosure vulnerability via /index.php?page=home...

PT-2022-18742

Name of the Vulnerable Software and Affected Versions Movie Seat Reservation version 1 Description The issue is related to an unauthenticated file disclosure vulnerability. This vulnerability can be exploited via the "/index.php?page=home" API endpoint. Recommendations For Movie Seat Reservation...

Movie Seat Reservation System 1.0 File Disclosure / SQL Injection

Movie Seat Reservation System Sql Injection Author: D4rkP0w4r Note = exploit don't need login account Exploit Use Burp Suite capture request with payload GET...

Seat Reservation System安全漏洞

Seat Reservation System is a seat reservation system for individual developers. A security vulnerability exists in Movie Seat Reservation v1, which stems from a lack of authentication and file restrictions in /index.php?page=home, leading to file disclosure...

CVE-2021-46417

Insecure handling of a download function leads to disclosure of internal files due to path traversal with root privileges in Franklin Fueling Systems Colibri Controller Module 1.8.19.8580...

CVE-2021-46417

Insecure handling of a download function leads to disclosure of internal files due to path traversal with root privileges in Franklin Fueling Systems Colibri Controller Module 1.8.19.8580...

CVE-2021-46417: Improper Limitation of a Pathname to a Restricted Directory

Insecure handling of a download function leads to disclosure of internal files due to path traversal with root privileges in Franklin Fueling Systems Colibri Controller Module 1.8.19.8580...

Arbitrary File Disclosure Via Password Leakage

vrana/adminer is vulnerable to arbitrary file disclosure. The vulnerability exists because the user credential requests when connecting to the database are not properly validated which allows an attacker to send requests to establish a database connection and arbitrarily read files on the server...

CVE-2022-28063

Simple Bakery Shop Management System v1.0 contains a file disclosure via /bsms/?page=products...

CVE-2022-28063

Simple Bakery Shop Management System v1.0 contains a file disclosure via /bsms/?page=products...

CVE-2022-28063

Simple Bakery Shop Management System v1.0 contains a file disclosure via /bsms/?page=products...

Input validation

Simple Bakery Shop Management System v1.0 contains a file disclosure via /bsms/?page=products...

CVE-2022-28063

CVE-2022-28063 affects Simple Bakery Shop Management System v1.0. The issue is a file disclosure via /bsms/?page=products caused by insufficient access restrictions/filters, enabling an attacker to view leaked files and compromising confidentiality (C: High, I: None, A: None per docs). No explici...

CVE-2022-28063

Simple Bakery Shop Management System v1.0 contains a file disclosure via /bsms/?page=products...

CVE-2022-28063: Undefined Security Weakness

Simple Bakery Shop Management System v1.0 contains a file disclosure via /bsms/?page=products...

PT-2022-18789

Name of the Vulnerable Software and Affected Versions Simple Bakery Shop Management System version 1.0 Description The issue concerns a file disclosure vulnerability. It can be exploited via the "/bsms/?page=products" API endpoint. Recommendations For Simple Bakery Shop Management System version...

Mitsubishi Electric Factory Automation 安全漏洞

Mitsubishi Electric Factory Automation is an industrial automation product from Mitsubishi Electric Corporation Mitsubishi Electric of Japan. A security vulnerability exists in Mitsubishi Electric Factory Automation, which can be exploited by an unauthenticated, remote attacker to disclose files...

CVE-2022-28148

The file browser in Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier may interpret some paths to files as absolute on Windows, resulting in a path traversal vulnerability allowing attackers with Item/Read permission to obtain the contents of arbitrary files on Windows...

CVE-2022-0679

The Narnoo Distributor WordPress plugin through 2.5.1 fails to validate and sanitize the libpath parameter before it is passed into a call to require via the narnoodistributorlibrequest AJAX action available to both unauthenticated and authenticated users which results in the disclosure of...

CVE-2022-0679

The Narnoo Distributor WordPress plugin through 2.5.1 fails to validate and sanitize the libpath parameter before it is passed into a call to require via the narnoodistributorlibrequest AJAX action available to both unauthenticated and authenticated users which results in the disclosure of...