44220 matches found
Deltek Maconomy 2.2.5 - Local File Inclusion
Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.WMCS/ PATHINFO, as demonstrated by a cgi-bin/Maconomy/MaconomyWS.macx1.WMCS/etc/passwd URI. id: CVE-2019-12314 info: name: Deltek Maconomy 2.2.5 - Local File Inclusion author: madrobot severity:...
Metabase - Local File Inclusion
Metabase is an open source data analytics platform. In affected versions a local file inclusion security issue has been discovered with the custom GeoJSON map admin-settings-maps-custom maps-add a map support and potential local file inclusion including environment variables. URLs were not...
GHSA-XHF4-832V-7XCR vulnerabilities
Vulnerabilities for packages: telegraf...
WordPress Theme Test Drive plugin <= 2.9.1 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Steven Julian in WordPress Plugin Theme Test Drive versions = 2.9.1...
WordPress Vavo Core plugin <= 2.3.0 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Vavo Core versions = 2.3.0...
CVE-2026-58420
Local File Inclusion via file:// URI in Migration Restore...
CVE-2026-58420
CVE-2026-58420 covers a Local File Inclusion (LFI) in Gitea’s Migration Restore. The vulnerability arises because the restore path feeds user-supplied asset.DownloadURL directly into a helper that supports both http/https and file:// schemes, with no validation to restrict to HTTP(S). An attacker...
CVE-2026-58420 Local File Inclusion via file:// URI in Migration Restore
Local File Inclusion via file:// URI in Migration Restore...
CVE-2026-58420 Local File Inclusion via file:// URI in Migration Restore
Local File Inclusion via file:// URI in Migration Restore...
CVE-2026-73574
In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...
EUVD-2026-58073
In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...
CVE-2026-73574
In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...
CVE-2026-73574
In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...
CVE-2026-73574
CVE-2026-73574 affects Zimbra Collaboration (before 10.1.17). The issue is a local file inclusion (LFI) in the Forward servlet of the Classic Web Client due to improper validation of the fu request parameter, allowing an unauthenticated attacker to disclose protected files (e.g., WEB-INF/web.xml)...
CVE-2026-66657
Unauthenticated Local File Inclusion in Biagiotti Core = 2.1.1 versions...
CVE-2026-66656
Unauthenticated Local File Inclusion in Foton Core = 1.1.1 versions...
CVE-2026-66653
Unauthenticated Local File Inclusion in Barista = 2.5.1 versions...
CVE-2026-66450
Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...