6567 matches found
CVE-2016-2205
Directory traversal vulnerability in the file-download configuration file in the management console in Symantec Workspace Streaming SWS 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtualization SWV 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 allows remote...
Directory traversal
Directory traversal vulnerability in the file-download configuration file in the management console in Symantec Workspace Streaming SWS 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtualization SWV 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 allows remote...
Default configuration
The management console in Symantec Workspace Streaming SWS 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtualization SWV 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 allows remote authenticated users to read arbitrary files by modifying the file-download...
CVE-2016-2205
Directory traversal vulnerability in the file-download configuration file in the management console in Symantec Workspace Streaming SWS 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtualization SWV 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 allows remote...
CVE-2016-2206
The management console in Symantec Workspace Streaming SWS 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtualization SWV 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 allows remote authenticated users to read arbitrary files by modifying the file-download...
CVE-2016-2206
The CVE-2016-2206 entry affects Symantec Workspace Streaming (SWS) and Symantec Workspace Virtualization (SWV). The vulnerability exists in the management consoles where an attacker can read arbitrary host files by altering the file-download configuration file. Affected versions include SWS 7.5.x...
Tiki Wiki CMS Groupware Arbitrary File Download Vulnerability (Jul 2016)
Tiki Wiki CMS Groupware is prone to arbitrary file download vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Tiki Wiki CMS 15.0 - Arbitrary File Download
Exploit Title: Tiki Wiki CMS 15.0 Arbitrary File Download Date: 11-07-2016 Software Link: https://tiki.org Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description Using flvstream.php file from vendor directory we...
File Containment Vulnerability in Online Marking System of Nanhao (Beijing) Technology Co.
Nanhao Online Marking System is an examination system for daily examination. Nanhao Online Marking System has multiple arbitrary file download vulnerabilities, which can be exploited by attackers to download database script files...
ZTE gateway device email_download.php that download.php around arbitrary File Download vulnerability
No description provided by source...
Tiki Wiki CMS 15.0 - Arbitrary File Download
Exploit for php platform in category web applications Exploit Title: Tiki Wiki CMS 15.0 Arbitrary File Download Date: 11-07-2016 Software Link: https://tiki.org Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1...
Tiki Wiki CMS 15.0 Arbitrary File Download
Exploit Title: Tiki Wiki CMS 15.0 Arbitrary File Download Date: 11-07-2016 Software Link: https://tiki.org Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description Using flvstream.php file from vendor directory we...
Tiki Wiki CMS 15.0 - Arbitrary File Download
Tiki Wiki CMS 15.0 - Arbitrary File Download Exploit Title: Tiki Wiki CMS 15.0 Arbitrary File Download Date: 11-07-2016 Software Link: https://tiki.org Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description Using...
AVCON6 video conferencing system org_execl_download. action arbitrary File Download vulnerability
No description provided by source...
Webnet CMS download.php parameters filename arbitrary File Download vulnerability
No description provided by source...
Arbitrary File Download Vulnerability in Latest Version of TurboMail Mail
TurboMail email system is an email server system developed for the communication needs of enterprises and institutions. The latest version of TurboMail Mail has an arbitrary file download vulnerability. An attacker can exploit the vulnerability to download arbitrary files and leak sensitive...
Arbitrary File Download Vulnerability in Latest Version of TurboMail Mail
TurboMail mail system is an e-mail server system developed for the communication needs of enterprises and institutions. The system kernel is developed in C language, which is rigorous and safe and has excellent development. The latest version of TurboMail Mail has an arbitrary file download...
WebNMS Framework Server Credential Disclosure
This module abuses two vulnerabilities in WebNMS Framework Server 5.2 to extract all user credentials. The first vulnerability is an unauthenticated file download in the FetchFile servlet, which is used to download the file containing the user credentials. The second vulnerability is that the...
WebNMS Framework Server Arbitrary Text File Download
This module abuses a vulnerability in WebNMS Framework Server 5.2 that allows an unauthenticated user to download files off the file system by using a directory traversal attack on the FetchFile servlet. Note that only text files can be downloaded properly, as any binary file will get mangled by...