CVE-2016-4874

CVE-2016-4874 affects Cybozu Office (versions 9.0.0 through 10.4.0). The vulnerability is a Reflected File Download (RFD) that could enable remote attackers to cause unintended files to be downloaded when a logged-in user visits a malicious page. Root cause details are not explicitly provided in ...

CVE-2016-4874

Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to conduct a "reflected file download" attack...

PHPCMS V9 arbitrary file download Windows

A, background Arbitrary File Download vulnerability and the PHPCMS v9. 6. 0 wap module SQL injection on in the same file, but the trigger point in the download function. Second, the details 漏洞文件在phpcms\modules\content\down.php vulnerability to trigger the function: php public function download th...

Arbitrary file download vulnerability in the fileName parameter of GoodVision video conferencing system

GoodVision Video Conferencing System is a software application for pc platforms in Simplified Chinese language. There is an arbitrary file download vulnerability in the fileName parameter of GoodVision Video Conferencing System. This allows attackers to exploit the vulnerability to obtain sensiti...

Coppermine Gallery 1.5.44 Directory Traversal

Coppermine Gallery = 1.5.44 directory traversal vulnerability ============================================================== Coppermine is a multi-purpose fully-featured and integrated web picture gallery script written in PHP using GD or ImageMagick as image library with a MySQL backend. A...

SedSystems D3 Decimator Default Credentials / File Disclosure

SedSystems D3 Decimator Multiple Vulnerabilities ================================================ Identification of the vulnerable device can be performed by scanning for TCP port 9784 which offers a default remote API. When connected to this device it will announce itself with "connected" or...

PHPCMS WAP module arbitrary file download vulnerability

PHPCMS is a website management software. The software is developed in a modular way and supports a variety of classification methods. Using it makes it easy to design, develop and maintain a personalized website. An arbitrary file download vulnerability exists in the PHPCMS WAP module, which can ...

D-Link DWR-116 Arbitrary File Download Vulnerability

The DWR-116 is a wireless N300 multi-WAN router from D-Link. An arbitrary file download vulnerability exists in the web interface of the D-Link DWR-116, which can be exploited by a remote attacker to read an arbitrary file via a "GET /uir/" request.... double dot in the "GET /uir/" request to rea...

D-Link DWR-116 DWR-116A1 - Arbitrary File Download

D-Link DWR-116 DWR-116A1 - Arbitrary File Download Title: D-Link DWR-116 Arbitrary File Download Vendor: D-Link www.dlink.com Affected models: DWR-116 / DWR-116A1 Tested on: V1.01EU, V1.00CPb10, V1.05AU CVE: CVE-2017-6190 Date: 04.07.2016 Author: Patryk Bogdan @patrykbogdan Description: D-Link...

WordPress Elegant Themes Divi Theme Directory Traversal Nmap NSE Script

local http = require "http" local shortport = require "shortport" local stdnse = require "stdnse" local string = require "string" local vulns = require "vulns" local nmap = require "nmap" description = Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote...

D-Link DWR-116 Directory Traversal

Title: D-Link DWR-116 Arbitrary File Download Vendor: D-Link www.dlink.com Affected models: DWR-116 / DWR-116A1 Tested on: V1.01EU, V1.00CPb10, V1.05AU CVE: CVE-2017-6190 Date: 04.07.2016 Author: Patryk Bogdan @patrykbogdan Description: D-Link DWR-116 with firmware before V1.05b09 suffers from...

CVE-2016-9470

Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected File Download. www/delivery/asyncspc.php was vulnerable to the fairly new Reflected File Download RFD web attack vector that enables attackers to gain complete control over a victim's machine by virtually downloading a file from a...

CVE-2016-9470

Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected File Download. www/delivery/asyncspc.php was vulnerable to the fairly new Reflected File Download RFD web attack vector that enables attackers to gain complete control over a victim's machine by virtually downloading a file from a...

Design/Logic Flaw

Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected File Download. www/delivery/asyncspc.php was vulnerable to the fairly new Reflected File Download RFD web attack vector that enables attackers to gain complete control over a victim's machine by virtually downloading a file from a...

CVE-2016-9470

Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected File Download. www/delivery/asyncspc.php was vulnerable to the fairly new Reflected File Download RFD web attack vector that enables attackers to gain complete control over a victim's machine by virtually downloading a file from a...

CVE-2016-9470

Revive Adserver is affected by a Reflected File Download (RFD) vulnerability in the file www/delivery/asyncspc.php, impacting versions before 3.2.5 and 4.0.0. The issue allows an attacker to cause a victim’s machine to download a file from a trusted domain, potentially gaining control of the vict...

Cisco Prime Collaboration Assurance Multiple Vulnerabilities (Mar 2017)

cisco prime collaboration assurance is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Wordpress Photo Gallery Plugin Arbitrary File Download Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An arbitrary file download vulnerability exists in the Wordpress Photo Gallery plugin, which allows attackers to exploit the...

Wordpress Plugin Photo Gallery v3. 0 - arbitrary File Download

Vulnerability title: Wordpress Plugin Photo Gallery v3. 0 - arbitrary File Download Vulnerability type: arbitrary File Download Vulnerability impact: Photo Gallery v3. 0 Vulnerabilities exist in the url: http://localhost/PLUGINPATH/macdownload.php Vulnerability details:...

Wordpress Plugin Membership Simplified 1.58 - arbitrary File Download

Vulnerability title: Wordpress Plugin Membership Simplified 1.58 - arbitrary File Download Vulnerability type: arbitrary File Download Vulnerability impact: Membership Simplified 1.58 Vulnerabilities exist in the url: /wp-content/plugins/membership-simplified-for-oap-members-only/download.php...