CVE-2016-7135: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Plone CMS 5.x through 5.0.6 and 4.2.x through 4.3.11 allows remote administrators to read arbitrary files via a .. dot dot in the path parameter in a getFile action to Plone/++theme++barceloneta/@@plone.resourceeditor.filemanager-actions...

PT-2013-2861

Name of the Vulnerable Software and Affected Versions Novell ZENworks Configuration Management ZCM version 11.2.3 Description The issue allows remote attackers to read arbitrary files via a .. dot dot in the Filename parameter in a GetFile action to "zenworks-unmaninv/". This is a directory...

CVE-2013-1084: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the GetFle method in the umaninv service in Novell ZENworks Configuration Management ZCM 11.2.3 allows remote attackers to read arbitrary files via a .. dot dot in the Filename parameter in a GetFile action to zenworks-unmaninv/...