CVE-2020-7646

curlrequest through 1.0.1 allows reading any file by populating the file parameter with user input...

Input validation

curlrequest through 1.0.1 allows reading any file by populating the file parameter with user input...

CVE-2020-7646

curlrequest through 1.0.1 allows reading any file by populating the file parameter with user input...

PT-2020-2729

Name of the Vulnerable Software and Affected Versions curlrequest versions 1.0.0 through 1.0.1 Description The issue allows for the execution of arbitrary commands by injecting commands using a semicolon character in any of the options values. This can enable a remote attacker to execute arbitrar...

CVE-2020-12130

The AirDisk Pro app 5.5.3 for iOS allows XSS via the deleteFile parameter of the Delete function...

CVE-2020-11738

The Snap Creek Duplicator plugin before 1.3.28 for WordPress and Duplicator Pro before 3.8.7.1 allows Directory Traversal via ../ in the file parameter to duplicatordownload or duplicatorinit...

CVE-2020-11738: Improper Limitation of a Pathname to a Restricted Directory

The Snap Creek Duplicator plugin before 1.3.28 for WordPress and Duplicator Pro before 3.8.7.1 allows Directory Traversal via ../ in the file parameter to duplicatordownload or duplicatorinit...

CVE-2020-9467

Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function...

CVE-2020-9467

Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function...

CVE-2020-9467

Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function...

CVE-2020-9467

Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function...

CVE-2020-9467

Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function...

CVE-2020-9467: Improper Neutralization of Input During Web Page Generation

Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function...

PT-2020-2654 · Cloudbees +1 · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.227 and earlier Jenkins LTS versions 2.204.5 and earlier Description: The issue is related to the absence of HTTP Content-Security-Policy headers for files uploaded as file parameters to a build. This results in a stored...

CVE-2019-12769: Cross-Site Request Forgery (CSRF)

SolarWinds Serv-U Managed File Transfer MFT Web client before 15.1.6 Hotfix 2 is vulnerable to Cross-Site Request Forgery in the file upload functionality via ?Command=Upload with the Dir and File parameters...

CVE-2020-10387

Path Traversal in admin/download.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to download files from the server using a dot-dot-slash sequence ../ via the GET parameter file...

FHEM-6.0-Local-File-Inclusion-LFI-Vulnerability

FHEM-6.0-Local-File-Inclusion-LFI-Vulnerability LFI in FHEM...

PT-2020-18485

Name of the Vulnerable Software and Affected Versions Freelancy version 1.0.0 Description The issue allows remote command execution via a specific substring in the "file" parameter, in conjunction with the "type" parameter set to "application/x-php", when sent to the "/api/files/" API endpoint...

PT-2020-10393

Name of the Vulnerable Software and Affected Versions piSignage versions prior to 2.6.4 Description The issue allows a remote attacker, authenticated as a low-privilege user, to download arbitrary files from the Raspberry Pi. This is achieved through a path traversal vulnerability in the...

Cisco Data Center Network Manager AFW Image Upload Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...