6567 matches found
SweetRice 1.5.1 Local File Inclusion
||/usr/bin/python -- Coding: utf-8 -- Exploit Title: SweetRice 1.5.1 - Local File Inclusion Exploit Author: Ashiyane Digital Security Team Date: 03-11-2016 Vendor: http://www.basic-cms.org/ Software Link: http://www.basic-cms.org/attachment/sweetrice-1.5.1.zip Version: 1.5.1 Platform: WebApp - PH...
Arbitrary File Download Vulnerability in ShowgetFaqBackupFile Function of Tibco Call Center System
The core of Tibco's call center system is a communication-based system for internal and external corporate communication. An arbitrary file download vulnerability exists in the showgetFaqBackupFile function of the Tibco Call Center System. The vulnerability file is:...
Arbitrary File Download Vulnerability in ShowDownloadFile Function of Tibco Call Center System
The core of Tibco's call center system is a communication-based system for internal and external corporate communication. An arbitrary file download vulnerability exists in the showDownloadFile function of the ITS Call Center System. The vulnerability file is:...
ESPCMS has a database file download vulnerability
ESSENCE ESPCMS website management system based on LAMP development and construction of the website management system. ESPCMS has a database file download vulnerability. Due to logging into the background and clicking upgrade, the system will automatically backup the database data, the backup file...
Arbitrary File Download Vulnerability in ShowDownload Function of Tibco Call Center System
The core of Tibco's call center system is a communication-based system for internal and external corporate communication. An arbitrary file download vulnerability exists in the showDownload function of the Tibco Call Center System. The vulnerability file is: /userweb/php/index/log.class.php, whic...
Schneider Electric Unity PRO Remote Code Execution Vulnerability
Unity Pro is the universal IEC61131-3 programming, debugging and runtime software package for Premium, Atrium and Quantum PLCs. A remote code execution vulnerability exists in Schneider Electric Unity PRO in an insecure file download, which can be exploited by a remote attacker to execute arbitra...
Wordpress recent-backups plugin file download vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language. recent-backups is one of the version of the back plugin. A file download vulnerability exists in version v0.7 of the Wordpress recent-backups plugin, which can be exploited by remote...
File Download Vulnerability in AVTECH Devices
AVTECH, founded in 1996, is one of the world's leading CCTV manufacturers. The main products are surveillance equipment, network cameras, network video recorders and so on. A file download vulnerability exists in AVTECH devices. As the cab file request authenticated by the streamd web server is t...
Arbitrary File Download Vulnerability in ZTE Network Sentinel
Shenzhen Zhongke Xinye Information Technology Development Co., Ltd. was registered on September 28, 2002 in Nanshan Bureau of Shenzhen Municipal Market Supervision Administration. The company's business scope includes the development of information and computer technology, technical services;...
Cybozu Office Reflected File Download Vulnerability
Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. A security vulnerability exists in Cybozu Office versions 9.0.0 through 10.4.0. The vulnerability can be exploited by an attacker to download files by tricking users into visiting a malicious page...
Mastery OA /general/mytable/intel_view/video_file.php arbitrary File Download vulnerability
No description provided by source...
CVE-2015-1000010
Remote file download in simple-image-manipulator v1.0 wordpress plugin...
CVE-2015-1000007
Remote file download vulnerability in wptf-image-gallery v1.03...
CVE-2015-1000006
Remote file download vulnerability in recent-backups v0.7 wordpress plugin...
CVE-2015-1000005
Remote file download vulnerability in candidate-application-form v1.0 wordpress plugin...
CVE-2015-1000010
Remote file download in simple-image-manipulator v1.0 wordpress plugin...
CVE-2015-1000005
CVE-2015-1000005 affects the WordPress plugin Candidate Application Form (v1.0;
CVE-2015-1000010
CVE-2015-1000010 affects WordPress plugin Simple Image Manipulator v1.0. The vulnerability is a Local File Inclusion in ./simple-image-manipulator/controller/download.php due to lack of authentication checks and unsanitized file path input, allowing an attacker to read arbitrary files on the serv...