Arbitrary file deletion

OBottle 2.0 in \c\g.php contains an arbitrary file download vulnerability...

CVE-2020-36009

OBottle 2.0 in \c\g.php contains an arbitrary file download vulnerability...

CVE-2020-36009

OBottle 2.0 in \c\g.php contains an arbitrary file download vulnerability...

CVE-2020-36009

OBottle 2.0 in cg.php (the \c\g.php path) contains an arbitrary file download vulnerability. The CVE entry documents that this affects OBottle 2.0 and impacts confidentiality (C) with partial leakage per CVSS2/3 metrics, and contributes a HIGH impact under CVSSv3. The connected sources corroborat...

Arbitrary File Download Vulnerability in Tianrongxin Technology Group Reporter

Founded on August 30, 1985, Skyrun Technology Group is a leading provider of network security, big data and security cloud services in China. An arbitrary file download vulnerability exists in Tianrongxin Technology Group Reporter, which can be exploited by attackers to obtain sensitive informati...

PT-2021-11905

Name of the Vulnerable Software and Affected Versions: OBottle version 2.0 Description: The issue is related to an arbitrary file download vulnerability in the c/g.php file of OBottle. This vulnerability allows for the download of arbitrary files. Recommendations: For OBottle version 2.0, conside...

CVE-2020-36009: Undefined Security Weakness

OBottle 2.0 in \c\g.php contains an arbitrary file download vulnerability...

OBottle security vulnerabilities

OBottle is a lighter, database-free blog. An arbitrary file download vulnerability exists in cg.php in OBottle version 2.0. An attacker can exploit this vulnerability to obtain sensitive information...

Nextcloud: Download of file with arbitrary extension via injection into attachment header

Description ----------- When downloading mail attachments, the app fails to properly escape quotes in the content disposition header. Because of this, an attacker can send a victim a file with a benign extension such as .txt or .png which when downloaded will be stored with a malicious extension...

Arbitrary File Download Vulnerability in ESearch of Shanghai Panmicro Network Technology Co.

Ltd. is a company focusing on the field of collaborative management software to help organizations build a unified digital office platform. Ltd. ESearch suffers from an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

Arbitrary File Download Vulnerability in Next-Generation Firewall Control System of Shenzhen Zhongke NetWizard Technology Co.

Ltd. was founded in 2009, headquartered in Shenzhen Futian International E-commerce Industrial Park, is a national high-tech enterprises, double soft enterprise; the earliest domestic VPN R & D manufacturers, professional network security products R & D vendors, the company has been committed to...

Arbitrary File Download Vulnerability in SiteServer CMS

SiteServer CMS is open source, cross-platform, enterprise-class CMS content management system. SiteServer CMS suffers from an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

Arbitrary File Download Vulnerability in Library Cluster Management System of Guangzhou Tutron Computer Software Development Co.

Guangzhou Tutron Computer Software Development Co., Ltd. is a high-tech enterprise integrating product development, application integration and customer service. There is an arbitrary file download vulnerability in the library cluster management system of Guangzhou Tutron Computer Software...

TamronOS IPTV System Exploits Arbitrary File Download Vulnerability

TamronOS IPTV system is a set of Linux kernel-based development of broadband operators, hotels, schools, live on-demand all-in-one solution. TamronOS IPTV system suffers from an arbitrary file download vulnerability. An attacker can exploit the vulnerability to obtain sensitive information...

Gate One Directory Traversal Vulnerability (Dec 2020)

Gate One is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:liftoffsoftware:gateone...

Arbitrary File Download Vulnerability in H3C S1526

H3C S1526 is a new generation switch launched by Xinhua San Technologies Co. It is targeted at the cultural industry market such as Internet cafes, sing-along bars and digital movie theaters. The H3C S1526 suffers from an arbitrary file download vulnerability that can be exploited by attackers to...

Arbitrary File Download Vulnerability in Viwit Information TMS System

Vantage Information is a company that provides customers with a comprehensive logistics hybrid cloud solution that integrates intelligence and mobile connectivity and supports microservices architecture. An arbitrary file download vulnerability exists in Viwit's TMS system, which can be exploited...

Arbitrary File Download Vulnerability in WS5302 of Beijing StarNet Ruijie Network Technology Co.

The WS5302 is a wireless controller. The WS5302 has an arbitrary file download vulnerability that can be exploited by an attacker to download bin files and obtain sensitive information...

Improper Privilege Management in dolibarr/dolibarr

💥 BUG unprivileged user can download file of a agenda 💥 IMPACT user dont have access to specific agenda but still can download file uploaded to this agenda . 💥 TESTED VERSION dolibarr 14.0.0-beta 💥 STEP TO REPRODUCE 1. First goto admin account and add user B as normal user .\ Now give user B...

Arbitrary File Download Vulnerability in Smart Multi-service Security Gateway Intelligent Management Platform of Beijing Byzoro Network Technology Co.

Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. An arbitrary file download vulnerability exists in the Smart Multi-service Security Gateway Intelligent Management Platform o...