CVE-2025-46002: Relative Path Traversal

An issue in Filemanager v2.5.0 and below allows attackers to execute a directory traversal via sending a crafted HTTP request to the filemanager.php endpoint...

CVE-2013-1891

In OpenCart 1.4.7 to 1.5.5.1, implemented anti-traversal code in filemanager.php is ineffective and can be bypassed...

CVE-2013-1891

In OpenCart 1.4.7 to 1.5.5.1, implemented anti-traversal code in filemanager.php is ineffective and can be bypassed...

CVE-2013-1891

OpenCart 1.4.7–1.5.5.1 contains a directory traversal vulnerability in filemanager.php where the anti-traversal check is ineffective and can be bypassed. This affects code handling file paths, enabling potential access outside the intended directory structure. The CVE notes indicate an impact on ...

PT-2022-7728

Name of the Vulnerable Software and Affected Versions OpenCart versions 1.4.7 through 1.5.5.1 Description The anti-traversal code implemented in the filemanager.php of OpenCart is ineffective and can be bypassed. Recommendations For OpenCart versions 1.4.7 through 1.5.5.1, consider restricting...

CVE-2013-1891: Improper Limitation of a Pathname to a Restricted Directory

In OpenCart 1.4.7 to 1.5.5.1, implemented anti-traversal code in filemanager.php is ineffective and can be bypassed...

PT-2021-4033

Name of the Vulnerable Software and Affected Versions TCExam versions prior to 14.8.4 Description A reflected cross-site scripting issue exists due to improper validation of the paths provided in the f, d, and dir parameters in tce filemanager.php. This could cause reflected XSS via the unsanitiz...

PT-2021-4014

Name of the Vulnerable Software and Affected Versions TCExam versions prior to 14.8.2 Description A stored cross-site scripting issue exists, allowing an attacker to upload a malicious JavaScript payload via tce filemanager.php with a filename starting with a period. This payload would be trigger...

Codiad Remote Command Execution Vulnerability

Codiad is a U.S. software developer Kent Safranski developed a set of Web-based IDE framework , it contains a project/file manager and code editor , mainly used for online writing and editing code . A remote command execution vulnerability exists in the components/filemanager/class.filemanager.ph...

CVE-2015-1041

CVE-2015-1041 Affect: e107 CMS, version 1.0.4. Issue: Cross-site scripting (XSS) in e107_admin/filemanager.php allows remote attackers to inject arbitrary web script/HTML via the e107_files/ path in the QUERY_STRING. Root cause: insufficient input validation/escaping of the file path parameter. I...

CVE-2015-1041: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in e107admin/filemanager.php in e107 1.0.4 allows remote attackers to inject arbitrary web script or HTML via the e107files/ file path in the QUERYSTRING...

PLESK 7.5/7.6 - Filemanager.PHP Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20155/info PLESK is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system...

OpenCart 1.5.5.1 (filemanager.php) - Directory Traversal Arbitrary File Access

No description provided by source. waraxe-2013-SA098 - Directory Traversal Vulnerabilities in OpenCart 1.5.5.1 =============================================================================== Author: Janek Vind waraxe Date: 19. March 2013 Location: Estonia, Tartu Web:...

CVE-2014-3975

Absolute path traversal vulnerability in filemanager.php in AuraCMS 3.0 allows remote attackers to list a directory via a full pathname in the viewdir parameter...

CVE-2014-3974

AuraCMS 3.0 and earlier is affected by an XSS in filemanager.php (via the viewdir parameter). The vulnerability stems from unsanitized input in viewdir, enabling injection of arbitrary script/HTML. Affected product is AuraCMS; version scope is 3.0 and earlier. Public references indicate the issue...

CVE-2014-3975

CVE-2014-3975 describes an absolute path traversal in AuraCMS 3.0, exploitable through filemanager.php via a full pathname in the viewdir parameter, allowing remote attackers to list directories. The vulnerability is documented across multiple sources (NVD/Red Hat/CVE list), with the core issue b...

CVE-2014-3975: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in filemanager.php in AuraCMS 3.0 allows remote attackers to list a directory via a full pathname in the viewdir parameter...

CVE-2014-3974: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in filemanager.php in AuraCMS 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the viewdir parameter...

PT-2014-5647

Name of the Vulnerable Software and Affected Versions AuraCMS versions 3.0 and earlier Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the viewdir parameter in the filemanager.php file. Recommendations For AuraCMS versions...

PT-2014-5648

Name of the Vulnerable Software and Affected Versions AuraCMS version 3.0 Description The issue allows remote attackers to list a directory via a full pathname in the viewdir parameter in the filemanager.php file. This is due to an absolute path traversal vulnerability. Recommendations For AuraCM...