pikachu

It is an offensive tool for web application security training. The primary CVE ID is not explicitly mentioned, but the tool is designed to simulate various web application vulnerabilities, including Burt Force 暴力破解漏洞, XSS 跨站脚本漏洞, CSRF 跨站请求伪造, SQL-Inject SQL注入漏洞, RCE 远程命令/代码执行, Files Inclusion...

CVE-2021-43693

vesta 0.9.8-24 is affected by a file inclusion vulnerability in file web/add/user/index.php...

Arbitrary file deletion

vesta 0.9.8-24 is affected by a file inclusion vulnerability in file web/add/user/index.php...

CVE-2021-43693

Vesta 0.9.8-24 is affected by a file inclusion vulnerability in web/add/user/index.php due to insufficient filtering and restriction on file references. This can be exploited to cause file inclusion, per CVE-2021-43693 and CNVD/CNNVD entries. The documents do not specify exploit details beyond th...

CVE-2021-20123

Draytek VigorConnect 1.6.0-B3 exposes a local file inclusion flaw in the DownloadFileServlet, allowing an unauthenticated attacker to download arbitrary files from the host with root privileges. Affected component: DownloadFileServlet/file download functionality. Root-cause: LFI in the file downl...

CVE-2021-27341

OpenSIS Community Edition version = 7.6 is affected by a local file inclusion vulnerability in DownloadWindow.php via the "filename" parameter...

CVE-2020-35340

A local file inclusion vulnerability in ExpertPDF 9.5.0 through 14.1.0 allows attackers to read the file contents from files that the running ExpertPDF process has access to read...

File inclusion vulnerability exists in PHPSCUP (CNVD-2021-52304)

PHPSCUP is a set of pursuit of simplicity and ease of use of the system, the system is built-in business profile module, news module, product module, talent module, online message module and so on. PHPSCUP file contains a vulnerability that can be exploited by attackers to obtain server control...

File Containment Vulnerability in PatrolFlow Multiservice Security Gateway Intelligent Management Platform of Byzoro Networks

Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. A file inclusion vulnerability exists in the PatrolFlow multi-service security gateway intelligent management platform of...

File Containment Vulnerability in PatrolFlow Multiservice Security Gateway Intelligent Management Platform of Byzoro Networks (CNVD-2021-51373)

Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. A file inclusion vulnerability exists in PatrolFlow multi-service security gateway intelligent management platform of Byzoro...

in hascheksolutions/opentrashmail

✍️ Description Hi, there is a local file inclusion vulnerability in opentrashmail. In https://github.com/HaschekSolutions/opentrashmail/blob/master/web/api.phpL23 : php ?php define'DS', DIRECTORYSEPARATOR; define'ROOT', dirnameFILE; // $action = strtolower$REQUEST'a'; $email =...

File Containment Vulnerability in Xinhua SecPath ACG1000

The H3C SecPath ACG1000 is a next-generation application control gateway. A file inclusion vulnerability exists in the H3C SecPath ACG1000, which can be exploited by an attacker to gain control of the server...

Ab Initio Control Local File Inclusion Vulnerability

Ab Initio Control is a product of Ab Initio UK. The Ab Initio applications offered are optionally scheduled together to accomplish job monitoring and operations management. A local file inclusion vulnerability exists in Ab Initio Control＞Center versions prior to 4.0.2.6, which can be exploited by...

CVE-2020-35580

A local file inclusion vulnerability in the FileServlet in all SearchBlox before 9.2.2 allows remote, unauthenticated users to read arbitrary files from the operating system via a /searchblox/servlet/FileServlet?col=url= request. Additionally, this may be used to read the contents of the SearchBl...

File Containment Vulnerability in Netnifty Next Generation Extreme Firewall

NetShen Information Technology Beijing Co., Ltd. is a high-tech information security solution, product and service provider integrating technology research and development, manufacturing and comprehensive service. A file inclusion vulnerability exists in NetShen's next-generation Extreme Firewall...

Artica Pandora FMS File Containment Vulnerability

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A remote file inclusion vulnerability exists in Artica Pandora FMS version 742, which can be exploited by a least privileg...

Remote file inclusion

Local File Inclusion vulnerability of the omni-directional communication system allows remote authenticated attacker inject absolute path into Url parameter and access arbitrary file...

CVE-2021-32100

A remote file inclusion vulnerability exists in Artica Pandora FMS 742, exploitable by the lowest privileged user...

File Containment Vulnerability in V8+ Terminal Security System

V8+ Terminal Security System is a new-generation enterprise terminal security software, which can dynamically detect, real-time process, and trace unknown threats in the user's network across the network to meet the increasingly complex needs of domestic enterprise users for security protection o...

ThinkPHP has a file inclusion vulnerability

ThinkPHP is developed and maintained by the Shanghai Top Thinking company MVC structure of the open-source PHP framework. ThinkPHP has a file inclusion vulnerability that can be exploited by attackers to gain server control privileges...