Design/Logic Flaw

Jenkins before 2.107 and Jenkins LTS before 2.89.4 did not properly prevent specifying relative paths that escape a base directory for URLs accessing plugin resource files. This allowed users with Overall/Read permission to download files from the Jenkins master they should not have access to. On...

CVE-2018-6356

Jenkins before 2.107 and Jenkins LTS before 2.89.4 fail to block relative paths that escape the plugin resource directory, allowing users with Overall/Read to download files from the Jenkins master. On Windows, any file accessible to the master could be downloaded; on other OSes, any file under t...

PT-2018-17499

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 2.107 Jenkins LTS versions prior to 2.89.4 Description The issue allows users with Overall/Read permission to download files from the Jenkins master that they should not have access to, by not properly preventing the...

Debian: Security Advisory (DLA-1269-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-6356: Improper Limitation of a Pathname to a Restricted Directory

Jenkins before 2.107 and Jenkins LTS before 2.89.4 did not properly prevent specifying relative paths that escape a base directory for URLs accessing plugin resource files. This allowed users with Overall/Read permission to download files from the Jenkins master they should not have access to. On...

CVE-2018-6004

SQL Injection exists in the File Download Tracker 3.0 component for Joomla! via the dynfieldphone or sess parameter...

CVE-2018-6004

SQL Injection exists in the File Download Tracker 3.0 component for Joomla! via the dynfieldphone or sess parameter...

Sql injection

SQL Injection exists in the File Download Tracker 3.0 component for Joomla! via the dynfieldphone or sess parameter...

CVE-2018-6004

SQL Injection exists in the File Download Tracker 3.0 component for Joomla! via the dynfieldphone or sess parameter...

CVE-2018-6004

CVE-2018-6004 describes an SQL Injection in the Joomla! extension File Download Tracker 3.0 . The vulnerability occurs in the component’s input handling via the Dynfield[phone] or sess parameters, allowing an attacker to inject SQL and potentially compromise data. Public references in the connect...

CVE-2018-6004: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the File Download Tracker 3.0 component for Joomla! via the dynfieldphone or sess parameter...

PT-2018-17287

Name of the Vulnerable Software and Affected Versions: Joomla! File Download Tracker version 3.0 Description: A SQL Injection issue exists in the File Download Tracker component for Joomla!, which can be exploited via the dynfieldphone or sess parameter. Recommendations: For Joomla! File Download...

Joomla File Download Tracker 3.0 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component File Download Tracker 3.0 - SQL Injection Vendor Homepage: http://techsolsystem.com/ Software Link: https://extensions.joomla.org/extensions/extension/directory-a-documentation/downloads/file-download-tracker/...

Joomla! Component File Download Tracker 3.0 - SQL Injection

Joomla! Component File Download Tracker 3.0 - SQL Injection Exploit Title: Joomla! Component File Download Tracker 3.0 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://techsolsystem.com/ Software Link:...

Joomla! Component File Download Tracker 3.0 - SQL Injection

Exploit Title: Joomla! Component File Download Tracker 3.0 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://techsolsystem.com/ Software Link: https://extensions.joomla.org/extensions/extension/directory-a-documentation/downloads/file-download-tracker/ Version: 3.0 Category:...

CVE-2017-5795

A Local Arbitrary File Download vulnerability in HPE Intelligent Management Center IMC version PLAT 7.2 E0403P06 was found...

CVE-2017-5794

A Remote Arbitrary File Download vulnerability in HPE Intelligent Management Center IMC PLAT version 7.2 E0403P06 was found...

CVE-2017-5794

A Remote Arbitrary File Download vulnerability in HPE Intelligent Management Center IMC PLAT version 7.2 E0403P06 was found...

CVE-2017-5795

A Local Arbitrary File Download vulnerability in HPE Intelligent Management Center IMC version PLAT 7.2 E0403P06 was found...

CVE-2017-12555

A remote arbitrary file download and disclosure of information vulnerability in HPE Intelligent Management Center iMC Service Operation Management SOM version IMC SOM 7.3 E0501 was found...