7880 matches found
ZTE ZXCLOUD iRAI Security Vulnerability
ZTE ZXCLOUD iRAI is a virtualization device from ZTE Corporation ZTE, China. A security vulnerability exists in the ZTE ZXCLOUD iRAI that stems from an arbitrary file download vulnerability...
CVE-2023-25650: Improper Input Validation
There is an arbitrary file download vulnerability in ZXCLOUD iRAI. Since the backend does not escape special strings or restrict paths, an attacker with user permission could access the download interface by modifying the request parameter, causing arbitrary file downloads...
PYSEC-2023-286
Nautobot is a Network Source of Truth and Network Automation Platform built as a web application atop the Django Python framework with a PostgreSQL or MySQL database. In Nautobot 1.x and 2.0.x prior to 1.6.7 and 2.0.6, the URLs /files/get/?name=... and /files/download/?name=... are used to provid...
Download Manager < 3.2.83 - Unauthenticated Protected File Download Password Leak
Description The plugin does not protect file download's passwords, leaking it upon receiving an invalid one. 223 being the ID of a password protected download: curl -X POST --data 'wpdmID=223&dataType=json&execute=wpdmgetlink&action=wpdmajaxcall&password=123322'...
Download Manager < 3.2.83 - Unauthenticated Protected File Download Password Leak
Description The plugin does not protect file download's passwords, leaking it upon receiving an invalid one. PoC 223 being the ID of a password protected download: curl -X POST --data 'wpdmID=223=json=wpdmgetlink=wpdmajaxcall=123322' https://example.com/wp-json/wpdm/validate-password The response...
Cross site scripting
A Stored XSS issue in shared files download terms in Filerun Update 20220202 allows attackers to inject JavaScript code that is executed when a user follows the crafted share link...
Design/Logic Flaw
The Frontend File Manager Plugin WordPress plugin before 22.6 has a vulnerability that allows an Editor+ user to bypass the file download logic and download files such as wp-config.php...
CVE-2023-5105 Frontend File Manager < 22.6 - Editor+ Arbitrary File Download
The Frontend File Manager Plugin WordPress plugin before 22.6 has a vulnerability that allows an Editor+ user to bypass the file download logic and download files such as wp-config.php...
PT-2023-31750
Name of the Vulnerable Software and Affected Versions Frontend File Manager Plugin WordPress plugin versions prior to 22.6 Description The issue allows an Editor+ user to bypass the file download logic, enabling them to download sensitive files such as wp-config.php. Recommendations For versions...
VulnCheck KEV: CVE-2023-25573
metersphere is an open source continuous testing platform. In affected versions an improper access control vulnerability exists in /api/jmeter/download/files, which allows any user to download any file without authentication. This issue may expose all files available to the running process. This...
CVE-2023-5105: Improper Limitation of a Pathname to a Restricted Directory
The Frontend File Manager Plugin WordPress plugin before 22.6 has a vulnerability that allows an Editor+ user to bypass the file download logic and download files such as wp-config.php...
Hotel Booking Lite < 4.8.5 - Unauthenticated Arbitrary File Download & Deletion
Description The plugin does not validate file paths provided via user input, as well as does not have proper CSRF and authorisation checks, allowing unauthenticated users to download and delete arbitrary files on the server To download /etc/passwd: curl...
CVE-2023-46887
In Dreamer CMS before 4.0.1, the backend attachment management office has an Arbitrary File Download vulnerability...
CVE-2023-46887
In Dreamer CMS before 4.0.1, the backend attachment management office has an Arbitrary File Download vulnerability...
CVE-2023-46887
In Dreamer CMS before 4.0.1, the backend attachment management office has an Arbitrary File Download vulnerability...
Dreamer CMS Security Vulnerability
Dreamer CMS is a dreamer content management system developed by Junnan Wang, an individual developer in China. A security vulnerability exists in Dreamer CMS versions prior to 4.0.1, which stems from an arbitrary file download vulnerability in the attachment management office feature...
CVE-2023-46887: Download of Code Without Integrity Check
In Dreamer CMS before 4.0.1, the backend attachment management office has an Arbitrary File Download vulnerability...
CVE-2023-46887
In Dreamer CMS, versions prior to 4.0.1 expose an Arbitrary File Download vulnerability in the backend attachment management office. This affects the core product as described in CVE-2023-46887 with an attack vector that is network-based, no privileges required, and no user interaction, leading t...
CVE-2023-46887
In Dreamer CMS before 4.0.1, the backend attachment management office has an Arbitrary File Download vulnerability...
PT-2023-30254 · Unknown · Dreamer Cms
Name of the Vulnerable Software and Affected Versions: Dreamer CMS versions prior to 4.0.1 Description: The issue is related to an Arbitrary File Download vulnerability in the backend attachment management office. Recommendations: For versions prior to 4.0.1, update to version 4.0.1 or later to...