PT-2019-7149

Name of the Vulnerable Software and Affected Versions WP Marketplace plugin versions prior to 2.4.1 Description The issue allows remote authenticated users to download arbitrary files. This is achieved by exploiting a directory traversal vulnerability in the ajaxinit function, specifically by usi...

PT-2019-14912 · Fusionpbx · Fusionpbx

Name of the Vulnerable Software and Affected Versions: FusionPBX versions prior to 4.5.8 Description: The issue concerns an unsanitized file variable in the filedelete.php file, which is reflected in HTML. This leads to a potential XSS issue. Recommendations: For FusionPBX versions prior to 4.5.8...

PT-2019-14838

Name of the Vulnerable Software and Affected Versions HongCMS version 3.0.0 Description The issue allows for arbitrary file deletion by utilizing a ../ in the file parameter to the "admin/index.php/database/ajax" endpoint with the action set to delete. This can be exploited to delete critical fil...

CVE-2014-10396: Improper Limitation of a Pathname to a Restricted Directory

The epic theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to includes/download.php...

PT-2019-7072

Name of the Vulnerable Software and Affected Versions Epic theme for WordPress versions through 2014-09-07 Description The issue allows arbitrary file downloads via the file parameter to the "includes/download.php" endpoint. This could potentially lead to unauthorized access to sensitive files...

CVE-2014-10397: Improper Limitation of a Pathname to a Restricted Directory

The Antioch theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to lib/scripts/download.php...

CVE-2015-9396: Improper Neutralization of Input During Web Page Generation

The auto-thickbox-plus plugin through 1.9 for WordPress has wp-content/plugins/auto-thickbox-plus/download.min.php?file= XSS...

PT-2019-7355

Name of the Vulnerable Software and Affected Versions auto-thickbox-plus plugin versions 1.9 and earlier Description The issue concerns a XSS vulnerability in the auto-thickbox-plus plugin for WordPress. The vulnerability is related to the download.min.php file, specifically the file parameter. T...

PT-2019-7073

Name of the Vulnerable Software and Affected Versions Antioch theme for WordPress versions through 2014-09-07 Description The issue allows arbitrary file downloads via the file parameter to "lib/scripts/download.php". This enables unauthorized access to files on the system. Recommendations For...

PT-2019-13943

Name of the Vulnerable Software and Affected Versions Pydio version 6.0.8 Description The issue allows for Authenticated Server-Side Request Forgery SSRF during a Remote Link Feature download. An attacker can specify an intranet address in the file parameter to "index.php" when sending a file to ...

CVE-2019-15033: Server-Side Request Forgery (SSRF)

Pydio 6.0.8 allows Authenticated SSRF during a Remote Link Feature download. An attacker can specify an intranet address in the file parameter to index.php, when sending a file to a remote server, as demonstrated by the file=http%3A%2F%2F192.168.1.2 substring...

RHEL 7 : OpenShift Container Platform 4.1 jenkins (RHSA-2019:2548)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:2548 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cro...

jenkins: Arbitrary file write vulnerability using file parameter definitions (SECURITY-1424)

A path traversal vulnerability in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier in core/src/main/java/hudson/model/FileParameterValue.java allowed attackers with Job/Configure permission to define a file parameter with a file name outside the intended directory, resulting in an arbitrary fil...

jenkins: Arbitrary file write vulnerability using file parameter definitions (SECURITY-1424)

A path traversal vulnerability in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier in core/src/main/java/hudson/model/FileParameterValue.java allowed attackers with Job/Configure permission to define a file parameter with a file name outside the intended directory, resulting in an arbitrary fil...

Nevma Adaptive Images File Inclusion Vulnerability

WordPress plugin Adaptive Images is used to serve images in Wordpress based on device resolution, allowing dynamic resizing. A file inclusion vulnerability exists in WordPress plugin Adaptive Images versions prior to 0.6.67. An attacker can exploit this vulnerability to retrieve arbitrary files v...

Arbitrary file write vulnerability using file parameter definitions

Users with Job/Configure permission could specify a relative path escaping the base directory in the file name portion of a file parameter definition. This path would be used to store the uploaded file on the Jenkins controller, resulting in an arbitrary file write vulnerability. File parameters...

jenkins -- multiple vulnerabilities

Jenkins Security Advisory: Description Medium SECURITY-1424 / CVE-2019-10352 Arbitrary file write vulnerability using file parameter definitions High SECURITY-626 / CVE-2019-10353 CSRF protection tokens did not expire Medium SECURITY-534 / CVE-2019-10354 Unauthorized view fragment access...

PT-2019-9278

Name of the Vulnerable Software and Affected Versions Yeahlink Ultra-elegant IP Phone SIP-T41P version 66.83.0.35 Description The diagnostics web interface in the affected device does not properly validate path information, allowing an authenticated remote attacker to access privileged informatio...

CVE-2018-16961

An issue was discovered in Open XDMoD through 7.5.0. html/gui/general/dlpublication.php allows Path traversal via the file parameter, allowing remote attackers to read PDF files in arbitrary directories...

PT-2019-9385

Name of the Vulnerable Software and Affected Versions Open XDMoD versions prior to 7.5.0 Description An issue was discovered that allows path traversal via the file parameter in the "html/gui/general/dl publication.php" endpoint, enabling remote attackers to read PDF files in arbitrary directorie...