CVE-2018-13790

CVE-2018-13790 affects concrete5 8.2.0 via SSRF in tools/files/importers/remote.php, allowing an attacker to cause requests to internal hosts (local-network discovery/mapping) through the File Manager URL handling. NVD CVSS metrics show CVSS‑3.1 base score 7.2 (HIGH) with network attack vector, l...

CVE-2018-13790

A Server Side Request Forgery SSRF vulnerability in tools/files/importers/remote.php in concrete5 8.2.0 can lead to attacks on the local network and mapping of the internal network, because of URL functionality on the File Manager page...

CVE-2018-13790: Server-Side Request Forgery (SSRF)

A Server Side Request Forgery SSRF vulnerability in tools/files/importers/remote.php in concrete5 8.2.0 can lead to attacks on the local network and mapping of the internal network, because of URL functionality on the File Manager page...

PT-2018-12187

Name of the Vulnerable Software and Affected Versions concrete5 version 8.2.0 Description A Server Side Request Forgery SSRF issue in the remote.php file can lead to attacks on the local network and mapping of the internal network, due to URL functionality on the File Manager page. Recommendation...

CMS Made Simple File Manager Remote Code Execution (CVE-2018-1000094)

A remote command execution vulnerability exists in the File Manager interface of CMS Made Simple 2.2.5. By uploading a malicious file, an authenticated attacker with administrator privileges can exploit this vulnerability for execution of arbitrary code...

VMware AirWatch Agent Remote Code Execution Vulnerability

VMWare Airwatch Agent for Android is an Android-based device management solution from VMware that supports monitoring and managing an entire smartphone fleet. The solution supports monitoring and managing the entire smartphone fleet.VMWare Airwatch Agent for Windows Mobile is a version based on t...

CVE-2018-6968

The VMware AirWatch Agent for Android prior to 8.2 and AirWatch Agent for Windows Mobile prior to 6.5.2 contain a remote code execution vulnerability in real time File Manager capabilities. This vulnerability may allow for unauthorized creation and execution of files in the Agent sandbox and othe...

Remote code execution

The VMware AirWatch Agent for Android prior to 8.2 and AirWatch Agent for Windows Mobile prior to 6.5.2 contain a remote code execution vulnerability in real time File Manager capabilities. This vulnerability may allow for unauthorized creation and execution of files in the Agent sandbox and othe...

VMware AirWatch Agent updates resolve remote code execution vulnerability.

The VMware AirWatch Agent for Android and Windows Mobile devices contain a remote code execution vulnerability in real time File Manager capabilities. This vulnerability may allow for unauthorized creation and execution of files in the Agent sandbox and other publicly accessible directories such ...

CVE-2018-6968: Undefined Security Weakness

The VMware AirWatch Agent for Android prior to 8.2 and AirWatch Agent for Windows Mobile prior to 6.5.2 contain a remote code execution vulnerability in real time File Manager capabilities. This vulnerability may allow for unauthorized creation and execution of files in the Agent sandbox and othe...

PT-2018-17848

Name of the Vulnerable Software and Affected Versions VMware AirWatch Agent for Android versions prior to 8.2 VMware AirWatch Agent for Windows Mobile versions prior to 6.5.2 Description The issue concerns a remote code execution vulnerability in the real-time File Manager capabilities. This may...

VMware AirWatch Agent updates resolve remote code execution vulnerability.

The VMware AirWatch Agent for Android and Windows Mobile devices contain a remote code execution vulnerability in real time File Manager capabilities. This vulnerability may allow for unauthorized creation and execution of files in the Agent sandbox and other publicly accessible directories such ...

File System Crawler: diskover

diskover is an open source file system crawler and disk space usage software that uses Elasticsearch to index and manage data across heterogeneous storage systems. Using diskover, you are able to more effectively search and organize files and system administrators are able to manage storage...

CVE-2017-1000002

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/atutorfilemanagertraversal.rb 2026-09-08 06:48:23+00:00| seen|...

CVE-2018-11098

An issue was discovered in Frog CMS 0.9.5. There is a file upload vulnerability via the admin/?/plugin/filemanager/upload URI, a similar issue to CVE-2014-4912...

PT-2018-10308

Name of the Vulnerable Software and Affected Versions Frog CMS version 0.9.5 Description An issue was discovered in Frog CMS, where there is a file upload vulnerability via the "admin/?/plugin/file manager/upload" URI. Recommendations For Frog CMS version 0.9.5, consider restricting access to the...

CVE-2018-10806

An issue was discovered in Frog CMS 0.9.5. There is a reflected Cross Site Scripting Vulnerability via the filecurrentname parameter to the admin/?/plugin/filemanager/rename URI. This can be used in conjunction with CSRF...

Frog CMS Cross-Site Scripting Vulnerability (CNVD-2018-09306)

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. A remote attacker can exploit thi...

PT-2018-10117

Name of the Vulnerable Software and Affected Versions Frog CMS version 0.9.5 Description A reflected Cross Site Scripting issue was found, which can be exploited via the filecurrent name parameter to the "admin/?/plugin/file manager/rename" URI. This issue can be used in conjunction with a CSRF...

CMS Made Simple Physical Path Disclosure Vulnerability (CNVD-2018-09058)

CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A security vulnerability exists in CMSMS 2.2.7 and...