CVE-2017-5387: Insertion of Sensitive Information into Externally-Accessible File or Directory

The existence of a specifically requested local file can be found due to the double firing of the "onerror" when the "source" attribute on a " " tag refers to a file that does not exist if the source page is loaded locally. This vulnerability affects Firefox 51...

PT-2018-6246

Name of the Vulnerable Software and Affected Versions: dgard8.lab6 affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, giving access to files outside...

PT-2018-6195

Name of the Vulnerable Software and Affected Versions: wffserve affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, enabling the attacker to access...

PT-2018-6240

Name of the Vulnerable Software and Affected Versions: ltt versions affected versions not specified Description: The issue concerns a directory traversal problem, allowing an attacker to access the filesystem by manipulating the URL with "../". This vulnerability enables a malicious actor to acce...

PT-2018-6218

Name of the Vulnerable Software and Affected Versions: cypserver affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, giving access to files outside o...

PT-2018-6202

Name of the Vulnerable Software and Affected Versions: ewgaddis.lab6 affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, giving access to files outsi...

PT-2018-6247

Name of the Vulnerable Software and Affected Versions: yttivy versions affected versions not specified Description: The issue concerns a directory traversal problem, allowing an attacker to access the filesystem by manipulating the URL with "../". This vulnerability enables a malicious actor to...

PT-2018-6224

Name of the Vulnerable Software and Affected Versions: qinserve affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, giving access to files outside of...

PT-2018-6153

Name of the Vulnerable Software and Affected Versions: rtcmulticonnection-client versions affected versions not specified Description: The issue concerns a directory traversal vulnerability. This vulnerability allows an attacker to access the filesystem by manipulating the URL with "../" entries,...

PT-2018-6190

Name of the Vulnerable Software and Affected Versions: dylmomo versions affected versions not specified Description: The issue concerns a directory traversal problem, allowing an attacker to access the filesystem by manipulating the URL with "../". This can lead to the disclosure of private files...

PT-2018-6149

Name of the Vulnerable Software and Affected Versions: datachannel-client versions affected versions not specified Description: The issue concerns a directory traversal problem, allowing an attacker to access the filesystem by manipulating the URL with "../". This can lead to the disclosure of...

PT-2018-6119

Name of the Vulnerable Software and Affected Versions: fsk-server affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, giving access to files outside ...

PT-2018-6215

Name of the Vulnerable Software and Affected Versions: reecerver versions affected versions not specified Description: The issue concerns a directory traversal problem, allowing an attacker to access the filesystem by manipulating the URL with "../". This vulnerability enables a malicious actor t...

PT-2018-6213

Name of the Vulnerable Software and Affected Versions: 360class.jansenhm versions affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, giving access t...

PT-2018-6172

Name of the Vulnerable Software and Affected Versions: sspa versions affected versions not specified Description: The issue concerns a directory traversal problem, allowing an attacker to access the filesystem by manipulating the URL with "../". This vulnerability enables a malicious actor to...

PT-2018-6239

Name of the Vulnerable Software and Affected Versions: lessindex versions affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, giving access to files...

PT-2018-6125

Name of the Vulnerable Software and Affected Versions: serveryaozeyan versions affected versions not specified Description: The issue concerns a directory traversal vulnerability in serveryaozeyan, a simple HTTP server. This vulnerability allows an attacker to access the filesystem by placing ".....

PT-2018-6189

Name of the Vulnerable Software and Affected Versions: 22lixian versions affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, giving access to files...

PT-2018-9919

Name of the Vulnerable Software and Affected Versions: Samsung Email versions prior to 5.0.02.16 Description: This issue allows local attackers to disclose sensitive information by exploiting a flaw in the handling of file:/// URIs. The problem stems from the lack of proper validation of...

PT-2018-6243

Name of the Vulnerable Software and Affected Versions: sgqserve affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, giving access to files outside of...