CVE-2020-35577

In Endalia Selection Portal before 4.205.0, an Insecure Direct Object Reference IDOR allows any authenticated user to download every file uploaded to the platform by changing the value of the file identifier aka CommonDownload identification number...

CVE-2020-35577: Undefined Security Weakness

In Endalia Selection Portal before 4.205.0, an Insecure Direct Object Reference IDOR allows any authenticated user to download every file uploaded to the platform by changing the value of the file identifier aka CommonDownload identification number...

CVE-2021-22857

The CGE page with download function contains a Directory Traversal vulnerability. Attackers can use this loophole to download system files arbitrarily...

CVE-2021-22857: Improper Limitation of a Pathname to a Restricted Directory

The CGE page with download function contains a Directory Traversal vulnerability. Attackers can use this loophole to download system files arbitrarily...

WordPress Theme Editor plugin <= 2.5 - Multiple Authenticated Arbitrary File Download vulnerabilities

Multiple Authenticated Arbitrary File Download vulnerabilities found by Nguyen Van Khanh and WPScan security research team in WordPress Theme Editor plugin versions = 2.5. Solution Update the WordPress Theme Editor plugin to the latest available version at least 2.6...

Theme Editor < 2.6 - Authenticated Arbitrary File Download

The plugin did not validate the GET file parameter before passing it to the downloadfile function, allowing administrators to download arbitrary files on the web server, such as /etc/passwd Edit WPScanTeam: The AJAX action wpajaxmkthemeeditorfileopen could also be used to achieve the same thing a...

Theme Editor < 2.6 - Authenticated Arbitrary File Download

The plugin did not validate the GET file parameter before passing it to the downloadfile function, allowing administrators to download arbitrary files on the web server, such as /etc/passwd Edit WPScanTeam: The AJAX action wpajaxmkthemeeditorfileopen could also be used to achieve the same thing a...

CVE-2021-21133

Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download files to bypass navigation restrictions via a crafted HTML page...

CVE-2021-21133

Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download files to bypass navigation restrictions via a crafted HTML page...

Arbitrary file download vulnerability exists in ShopXO (CNVD-2021-14523)

ShopXO is an open source enterprise-level open source e-commerce system. ShopXO has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2021-21288

CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. In CarrierWave before versions 1.3.2 and 2.1.1 the download feature has an SSRF vulnerability, allowing attacks to provide DNS entries or IP addresses that are intended for...

Backup by Supsystic <= 2.3.9 - Authenticated Arbitrary File Download and Deletion

The plugin does not check for path traversal attacks, allowing administrator to download and delete any file from the web server. Due to the lack of CSRF check on the file deletion, unauthenticated attacker could make a logged in administrator delete files from the web server as well The PoC will...

Backup by Supsystic <= 2.3.9 - Authenticated Arbitrary File Download and Deletion

The plugin does not check for path traversal attacks, allowing administrator to download and delete any file from the web server. Due to the lack of CSRF check on the file deletion, unauthenticated attacker could make a logged in administrator delete files from the web server as well PoC The PoC...

Carrierwave -- Multiple vulnerabilities

Community reports: Fix Code Injection vulnerability in CarrierWave::RMagick Fix SSRF vulnerability in the remote file download feature...

Hefei Mingjing Information Technology Co., Ltd. JTopCMS background there are arbitrary file download vulnerabilities

JTopCMS is based on the JavaEE standard , used to manage site content of the open source web management system . Hefei Mingjing Information Technology Co., Ltd. JTopCMS background arbitrary file download vulnerability, attackers can use the vulnerability to download configuration files and so on...

Arbitrary File Download Vulnerability in LinkWechat

LinkWeChat is an open source SCRM system based on enterprise WeChat. LinkWechat has an arbitrary file download vulnerability that can be exploited by an attacker to download arbitrary files under the system...

Arbitrary File Download Vulnerability in SeaCMS Backend

Ocean CMS SeaCMS, Ocean Movie Management System is a video-on-demand system designed for webmasters with different needs. SeaCMS suffers from an SQL injection vulnerability. An attacker can exploit the vulnerability to download arbitrary files...

Arbitrary File Download Vulnerability in Beijing Tonglian Information Technology Co.

Beijing Tonglian Information Technology Co., Ltd. is a provider of informatization services focusing on governmental cooperative office, internal control management and political and legal cooperative case handling in the field of e-government. There is an arbitrary file download vulnerability in...

Security Bulletin: It is possible to download arbitrary server files via ViewONE server (CVE-2019-4260)

Summary A logged in user may be able to download arbitrary files from the server using the ViewONE Virtual platform. Vulnerability Details CVEID: CVE-2019-4260 DESCRIPTION: IBM Daeja ViewONE Professional, Standard & Virtual could allow an unauthorized user to download server files resulting in...

STVS ProVision 5.9.10 - File Disclosure (Authenticated)

Exploit Title: STVS ProVision 5.9.10 - File Disclosure Authenticated Date: 19.01.2021 Exploit Author: LiquidWorm Vendor Homepage: http://www.stvs.ch STVS ProVision 5.9.10 archive.rb Authenticated File Disclosure Vulnerability Vendor: STVS SA Product web page: http://www.stvs.ch Platform: Ruby...