CVE-2017-15894

Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology DiskStation Manager DSM 6.0.x before 6.0.3-8754-3 and before 5.2-5967-6 allows remote authenticated users to write arbitrary files via the destfolderpath parameter...

PT-2017-14271

Name of the Vulnerable Software and Affected Versions Synology File Station versions prior to 1.1.1-0099 Description The issue allows remote authenticated users to write arbitrary files via the dest folder path parameter in the SYNO.FileStation.Extract function. Recommendations For versions prior...

Red Spider Multimedia Network Classroom has Memory Corruption, Override Vulnerability

RedSpider Multimedia Network Classroom is a software product that realizes multimedia network teaching in electronic classroom, multimedia network classroom or computer classroom. Starscream Multimedia Network Classroom handles folder paths with override and memory corruption vulnerabilities, an...

QnECMS <= 2.5.6 (adminfolderpath) Remote File Inclusion Exploit

No description provided by source...

WordPress Plugin Zingiri 2.2.3 - ajax_save_name.php Remote Code Execution

WordPress Plugin Zingiri 2.2.3 - ajaxsavename.php Remote Code Execution get; 41. ifremoveTrailingSlash$sessionAction-getFolder == getParentPath$POST'id' && sizeof$selectedDocuments 42. 43. if$key = arraysearchbasename$POST'id', $selectedDocuments !== false 44. 45...

360 Web Manager 3.0 File Access

Exploit Title: Multiple vulnerabilities in 360 Web Manager 3.0 Google Dork: "Powered by 360 Web Manager 3.0" Date: 15/04/2011 Author: Ignacio Garrido Contact: [email protected] Software Link: www.360webmanager.com Version: v3.0 Tested on: Linux 2.6.18 Vulnerability description: 360 Web Manager 3....