Arbitrary file deletion

A Local Arbitrary File Download vulnerability in HPE Intelligent Management Center IMC version PLAT 7.2 E0403P06 was found...

Design/Logic Flaw

A remote arbitrary file download and disclosure of information vulnerability in HPE Intelligent Management Center iMC Service Operation Management SOM version IMC SOM 7.3 E0501 was found...

Arbitrary file deletion

A Remote Arbitrary File Download vulnerability in HPE Intelligent Management Center IMC PLAT version 7.2 E0403P06 was found...

CVE-2017-12555

CVE-2017-12555 affects HPE Intelligent Management Center (iMC) SOM version IMC SOM 7.3 E0501. A remote attacker can download arbitrary files and disclose information due to a vulnerability in iMC SOM. Connected sources corroborate the issue across NVD and CNVD entries and related vulnerability no...

CVE-2017-12555

A remote arbitrary file download and disclosure of information vulnerability in HPE Intelligent Management Center iMC Service Operation Management SOM version IMC SOM 7.3 E0501 was found...

CVE-2017-5795

A Local Arbitrary File Download vulnerability in HPE Intelligent Management Center IMC version PLAT 7.2 E0403P06 was found...

CVE-2017-5794

A Remote Arbitrary File Download vulnerability in HPE Intelligent Management Center IMC PLAT version 7.2 E0403P06 was found...

CVE-2017-5794

HPE Intelligent Management Center (IMC) PLAT 7.2 E0403P06: FileUploadServlet is vulnerable to directory traversal due to improper input validation in multipart form-data requests, enabling remote code execution with SYSTEM privileges (authentication may be bypassed).

CVE-2017-5795

CVE-2017-5795 affects HPE Intelligent Management Center (IMC) PLAT 7.2 E0403P06. The vulnerability resides in FileDownloadServlet, where insufficient validation/sanitization of the fileName parameter allows directory traversal, enabling remote disclosure of arbitrary files. ZDI notes that exploit...

CVE-2018-6356

Jenkins before 2.107 and Jenkins LTS before 2.89.4 did not properly prevent specifying relative paths that escape a base directory for URLs accessing plugin resource files. This allowed users with Overall/Read permission to download files from the Jenkins master they should not have access to. On...

CVE-2017-5795: Exposure of Sensitive Information to an Unauthorized Actor

A Local Arbitrary File Download vulnerability in HPE Intelligent Management Center IMC version PLAT 7.2 E0403P06 was found...

CVE-2017-12555: Exposure of Sensitive Information to an Unauthorized Actor

A remote arbitrary file download and disclosure of information vulnerability in HPE Intelligent Management Center iMC Service Operation Management SOM version IMC SOM 7.3 E0501 was found...

CVE-2017-5794: Improper Input Validation

A Remote Arbitrary File Download vulnerability in HPE Intelligent Management Center IMC PLAT version 7.2 E0403P06 was found...

PT-2018-5426

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center iMC Service Operation Management SOM version IMC SOM 7.3 E0501 Description: A remote arbitrary file download and disclosure of information issue was discovered. Recommendations: For version IMC SOM 7.3 E0501,...

Ulterius Server File Download Vulnerability

This module exploits a directory traversal vulnerability in Ulterius Server 'Ulterius Server File Download Vulnerability', 'Description' = %q This module exploits a directory traversal vulnerability in Ulterius Server 'Rick Osgood', Vulnerability discovery and PoC 'Jacob Robles' Metasploit module...

DS Data Systems KonaKart eCommerce Platform Directory Traversal Vulnerability

DS Data Systems KonaKart eCommerce Platform is a Java-based eCommerce software from DS Data Systems, UK. The software enhances modules such as shopping cart, payment and order summarization. A directory traversal vulnerability exists in the administration panel of DS Data Systems KonaKart eCommer...

Arbitrary file download vulnerability in phpwechat version 1.1.6

phpWechat is a free and open source microsoft public platform management system. An arbitrary file download vulnerability exists in phpwechat version 1.1.6 at the data backup, which can be exploited by an attacker to download arbitrary files from the server, such as script code, service and syste...

DokuWiki Reflection File Download Vulnerability

DokuWiki is a German software developer Andreas Gohr developed a PHP-based Wiki engine , it is mainly used for small and medium-sized team and personal website knowledge base management , and provides version control , full-text search and permission control and other functions . A security...

Debian DLA-1269-1 : dokuwiki security update

It was discovered that an XHR/AJAX call did not properly encode user input in the 'dokuwiki' wiki platform. This resulted in a reflected file download vulnerability. For Debian 7 'Wheezy', this issue has been fixed in dokuwiki version 0.0.20120125b-2+deb7u2. We recommend that you upgrade your...

[SECURITY] [DLA 1269-1] dokuwiki security update

Package : dokuwiki Version : 0.0.20120125b-2+deb7u2 CVE ID : CVE-2017-18123 Debian Bug : 889281 It was discovered that an XHR/AJAX call did not properly encode user input in the "dokuwiki" wiki platform. This resulted in a reflected file download vulnerability. For Debian 7 "Wheezy", this issue h...