1674 matches found
Pimcore Security Vulnerability
Pimcore is Austria Pimcore company's set of open source for creating and managing Web applications Web content management platform. The platform integrates Web content management, e-commerce frameworks and product information management applications. A security vulnerability exists in Pimcore Adm...
CVE-2023-5177 Vrm 360 3D Model Viewer <= 1.2.1 - Full Path Disclosure
The Vrm 360 3D Model Viewer WordPress plugin through 1.2.1 exposes the full path of a file when putting in a non-existent file in a parameter of the shortcode...
Vrm 360 3D Model Viewer <= 1.2.1 - Full Path Disclosure
Description The plugin exposes the full path of a file when putting in a non-existent file in a parameter of the shortcode. 1. Create a page 2. Place the shortcode vrm360 canvasname=s1 modelurl=SACharacter.zip aspectratio=1.8 initialoffset=0.9 on the page SACharacter.zip should be a non-existent...
Vrm 360 3D Model Viewer <= 1.2.1 - Full Path Disclosure
Description The plugin exposes the full path of a file when putting in a non-existent file in a parameter of the shortcode. PoC 1. Create a page 2. Place the shortcode vrm360 canvasname=s1 modelurl=SACharacter.zip aspectratio=1.8 initialoffset=0.9 on the page SACharacter.zip should be a...
CVE-2023-39559
AudimexEE 15.0 was discovered to contain a full path disclosure vulnerability...
CVE-2023-39559
AudimexEE 15.0 was discovered to contain a full path disclosure vulnerability...
CVE-2023-39559
AudimexEE 15.0 was discovered to contain a full path disclosure vulnerability...
CVE-2023-39559
AudimexEE 15.0 was discovered to contain a full path disclosure vulnerability...
Audimex AG AudimexEE 路径遍历漏洞
Audimex AG AudimexEE is a system for audit management from Audimex Ag, Germany. The system meets complex audit processes around a company's business, supports customization for use and is deployed platform-independently. A security vulnerability exists in Audimex AG AudimexEE v15.0, which contain...
CVE-2023-39559
CVE-2023-39559 affects AudimexEE 15.0 and is described as a full path disclosure (path traversal) vulnerability. The available sources confirm the issue but do not provide a concrete root cause or affected components beyond AudimexEE 15.0; CVSS v3.1 base score is 5.3 (Medium) with Confidentiality...
CVE-2023-39559
AudimexEE 15.0 was discovered to contain a full path disclosure vulnerability...
PT-2023-27020 · Audimexee · Audimexee
Name of the Vulnerable Software and Affected Versions: AudimexEE version 15.0 Description: A full path disclosure issue was discovered. This means that the software may reveal the full path of files or directories on the server, potentially allowing attackers to gather sensitive information about...
SUSE CVE-2005-3622
phpMyAdmin 2.7.0-beta1 and earlier allows remote attackers to obtain the full path of the server via direct requests to multiple scripts in the libraries directory...
SUSE CVE-2016-6610
A full path disclosure vulnerability was discovered in phpMyAdmin where a user can trigger a particular error in the export mechanism to discover the full path of phpMyAdmin on the disk. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are...
SUSE CVE-2018-18839
An issue was discovered in Netdata 1.10.0. Full Path Disclosure FPD exists via api/v1/alarms. NOTE: the vendor says "is intentional...
SUSE CVE-2021-32734
Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, the Nextcloud Text application shipped with Nextcloud Server returned verbatim exception messages to the user. This could result in a full path disclosure on shared files. The issu...
CVE-2022-39178
Webvendome - webvendome Internal Server IP Disclosure. Send GET Request to the request which is shown in the picture. Internal Server IP and Full path disclosure...
CVE-2022-39178
CVE-2022-39178 pertains to Webvendome and describes an internal server IP and full path disclosure triggered by a GET request, suggesting a path traversal-related issue. The connected sources consistently reference Webvendome’s internal IP disclosure via a specific endpoint, but the documents do ...
