[SECURITY] [DLA 1269-1] dokuwiki security update

Package : dokuwiki Version : 0.0.20120125b-2+deb7u2 CVE ID : CVE-2017-18123 Debian Bug : 889281 It was discovered that an XHR/AJAX call did not properly encode user input in the "dokuwiki" wiki platform. This resulted in a reflected file download vulnerability. For Debian 7 "Wheezy", this issue h...

Hava Tahmin 1.0 Database Disclosure

======================================================================== | Title : hava tahmin v1.0 Database Disclosure Exploit | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : v1.0 | Vendor :...

CVE-2017-18123

The call parameter of /lib/exe/ajax.php in DokuWiki through 2017-02-19e does not properly encode user input, which leads to a reflected file download vulnerability, and allows remote attackers to run arbitrary programs...

Design/Logic Flaw

The call parameter of /lib/exe/ajax.php in DokuWiki through 2017-02-19e does not properly encode user input, which leads to a reflected file download vulnerability, and allows remote attackers to run arbitrary programs...

CVE-2017-18123

The call parameter of /lib/exe/ajax.php in DokuWiki through 2017-02-19e does not properly encode user input, which leads to a reflected file download vulnerability, and allows remote attackers to run arbitrary programs...

DEBIAN-CVE-2017-18123

The call parameter of /lib/exe/ajax.php in DokuWiki through 2017-02-19e does not properly encode user input, which leads to a reflected file download vulnerability, and allows remote attackers to run arbitrary programs...

CVE-2017-18123

The call parameter of /lib/exe/ajax.php in DokuWiki through 2017-02-19e does not properly encode user input, which leads to a reflected file download vulnerability, and allows remote attackers to run arbitrary programs...

CVE-2017-18123

The call parameter of /lib/exe/ajax.php in DokuWiki through 2017-02-19e does not properly encode user input, which leads to a reflected file download vulnerability, and allows remote attackers to run arbitrary programs...

CVE-2017-18123

The call parameter of /lib/exe/ajax.php in DokuWiki through 2017-02-19e does not properly encode user input, which leads to a reflected file download vulnerability, and allows remote attackers to run arbitrary programs...

CVE-2017-18123

CVE-2017-18123 affects DokuWiki up to version 2017-02-19e. The vulnerability stems from improper encoding of user input in the call parameter of /lib/exe/ajax.php, enabling a reflected file download that allows an attacker to trigger execution of arbitrary programs on the server. The issue is des...

Weak password, arbitrary file download vulnerability in Byzoro PatrolFlow-AM series security gateway

PatrolFlow-AM series products are high-performance application-delivery Internet behavior management devices launched by Byzoro Networks to meet the needs of Internet access users in the areas of information content security, regulation of online behavior, utilization of network resources,...

Jtag Members Directory Arbitrary File Download Vulnerability

Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other features . Jtag Members Directory is used in one of the member management plug-ins. An arbitrary file download vulnerability exists in...

Huawei eSpace Product Catalog Traversal Vulnerability

Huawei eSpace 7910, 7950 and 8950 are all 7910, 7950 and 8950 series IP Phones products from Huawei, China. A directory traversal vulnerability exists in the Huawei eSpace 7910, 7950, and 8950. The vulnerability is due to the device failing to adequately validate URL addresses. An attacker can...

Arbitrary File Download Vulnerability in CAJViewer, a Specialized Reader for China Knowledge Network (CNN)

CAJViewer is a series of CAJViewer products of National Engineering Research Center of CD-ROM and Tsinghua Tongfang Knowledge Network Beijing Technology Co., Ltd. and a special full-text format viewer for China Periodicals Network CJN, which supports TEB, CAJ, NH, KDH, and PDF format files of CJN...

CVE-2018-6008

Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the downloadfile parameter...

CVE-2018-6008

Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the downloadfile parameter...

Design/Logic Flaw

Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the downloadfile parameter...

CVE-2018-6008

Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the downloadfile parameter...

CVE-2018-6008

Affected software : Joomla! Jtag Members Directory 5.3.7. Vulnerability : Local File Inclusion via the download_file parameter, enabling arbitrary file download. Root cause : improper handling of input in the component leading to LFI. Impact : potential unauthorized access to sensitive server fil...

Joomla Jtag Members Directory 5.3.7 Component - Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Jtag Members Directory 5.3.7 - Arbitrary File Download Dork: N/A Date: 27.01.2018 Vendor Homepage: https://joomlatag.com/ Software Link:...