CVE-2019-13665

Insufficient filtering in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass multiple file download protection via a crafted HTML page...

PHPOK has an arbitrary file download vulnerability

PHPOK is a set of enterprise station CMS system developed in PHP + MYSQL language. PHPOK arbitrary file download vulnerability, attackers can use the vulnerability of any read, download files, access to sensitive information...

CVE-2019-9530 The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all files

The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all files. This could allow an unauthenticated, local attacker connected to the device to access and download any file found in the web root directory...

PT-2019-19687

Name of the Vulnerable Software and Affected Versions Cobham EXPLORER 710 firmware version 1.07 Description The issue concerns the lack of access restrictions on the web root directory, allowing an unauthenticated, local attacker connected to the device to access and download any file found in th...

Schneider Electric Modicon M580 TFTP server information disclosure vulnerability

Summary An exploitable information disclosure vulnerability exists in the TFTP server functionality of the Schneider Electric Modicon M580 Programmable Automation Controller. A specially crafted TFTP get request can cause a file download, resulting in disclosure of sensitive information. An...

SQLMap v1.3.10 - Automatic SQL Injection And Database Takeover Tool

SQLMap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lastin...

CVE-2019-13343

Butor Portal before 1.0.27 is affected by a Path Traversal vulnerability leading to a pre-authentication arbitrary file download. Effectively, a remote anonymous user can download any file on servers running Butor Portal. WhiteLabelingServlet is responsible for this vulnerability. It does not...

CVE-2019-13343

Butor Portal before 1.0.27 is affected by a Path Traversal vulnerability leading to a pre-authentication arbitrary file download. Effectively, a remote anonymous user can download any file on servers running Butor Portal. WhiteLabelingServlet is responsible for this vulnerability. It does not...

Path traversal

Butor Portal before 1.0.27 is affected by a Path Traversal vulnerability leading to a pre-authentication arbitrary file download. Effectively, a remote anonymous user can download any file on servers running Butor Portal. WhiteLabelingServlet is responsible for this vulnerability. It does not...

CVE-2019-13343

Butor Portal before 1.0.27 is affected by a Path Traversal vulnerability leading to a pre-authentication arbitrary file download. Effectively, a remote anonymous user can download any file on servers running Butor Portal. WhiteLabelingServlet is responsible for this vulnerability. It does not...

CVE-2019-13343

CVE-2019-13343 affects Butor Portal prior to 1.0.27 via a path traversal vulnerability in WhiteLabelingServlet. The t parameter is not properly sanitized, allowing a pre-authentication arbitrary file download by constructing a path like /wl?t=../../...&h=. Impact is potential exposure of server f...

CVE-2019-13343

Butor Portal before 1.0.27 is affected by a Path Traversal vulnerability leading to a pre-authentication arbitrary file download. Effectively, a remote anonymous user can download any file on servers running Butor Portal. WhiteLabelingServlet is responsible for this vulnerability. It does not...

CVE-2019-13343: Improper Limitation of a Pathname to a Restricted Directory

Butor Portal before 1.0.27 is affected by a Path Traversal vulnerability leading to a pre-authentication arbitrary file download. Effectively, a remote anonymous user can download any file on servers running Butor Portal. WhiteLabelingServlet is responsible for this vulnerability. It does not...

PT-2019-13278

Name of the Vulnerable Software and Affected Versions Butor Portal versions prior to 1.0.27 Description The issue allows a remote anonymous user to download any file on servers running the affected software due to a Path Traversal vulnerability. This is caused by the WhiteLabelingServlet not...

Directory Traversal and Arbitrary File Download Vulnerabilities in MayiCMS (Ant Classification Information System)

MayiCMS Ant Classified Information System is a php mysql based website builder. Ant Classifieds Information System suffers from directory traversal and arbitrary file download vulnerabilities. An attacker can obtain sensitive information by traversing the directory and downloading website source...

Arbitrary file download vulnerability in the ba***.cl***.php file of the Seven Little Bears repository system

Seven bears library system a similar Baidu library online document preview, selling system. A vulnerability exists in the ba.cl.php file of the Seven Little Bears library system, which can be exploited by an attacker to obtain sensitive information. An attacker can exploit the vulnerability to...

V-SOL GPON / EPON OLT Platform File Download Vulnerability

V-SOL GPON is a network switch device. A file download vulnerability exists in the V-SOL GPON / EPON OLT platform, which can be exploited by an attacker to download a download configuration...

Arbitrary File Download Vulnerability in Guojiz

Guojiz is a light community system based on layui front-end framework and thinkphp. Guojiz has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

WeLive da***.php file has an arbitrary file deletion download vulnerability

WeLive online customer service system is a small program, easy to install and use online online customer service system. WeLive da.php file exists arbitrary file deletion and download vulnerability, an attacker can use the vulnerability can be cross-directory download, delete arbitrary files...

Arbitrary File Download Vulnerability in RGCMS

RuiGu information management system RGCMS is a set of open source building management system, using PHP language, written in the framework of Thinkphp5.1.+, the database using MYSQL database. RGCMS arbitrary file download vulnerability, an attacker can use the vulnerability to read any file in th...