4350 matches found
MantisBT 2.10.0 'view_all_bug_page' Path Disclosure Vulnerability - Linux
MantisBT is prone to a path disclosure vulnerability. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2018-6526
viewallbugpage.php in MantisBT 2.10.0-development before 2018-02-02 allows remote attackers to discover the full path via an invalid filter parameter, related to a filterensurevalidfilter call in currentuserapi.php...
CVE-2018-6526
viewallbugpage.php in MantisBT 2.10.0-development before 2018-02-02 allows remote attackers to discover the full path via an invalid filter parameter, related to a filterensurevalidfilter call in currentuserapi.php...
CVE-2018-6526
CVE-2018-6526 affects MantisBT; path disclosure in view_all_bug_page.php (2.10.0-development before 2018-02-02) via an invalid filter parameter tied to filter_ensure_valid_filter in current_user_api.php. The vulnerability allows remote attackers to discover the full filesystem path. Affected comp...
CVE-2018-6526
viewallbugpage.php in MantisBT 2.10.0-development before 2018-02-02 allows remote attackers to discover the full path via an invalid filter parameter, related to a filterensurevalidfilter call in currentuserapi.php...
Atmail 7.1.1 PRO Cross Site Scripting
============================================================================ | Title : Atmail v7.1.1 PRO XSS Vulnerability | | Author : indoushka | | email : [email protected] | | Tested on : windows 10 FranASSais V.Pro | | Version : v7.1.1 | | Vendor : www.p30vel.ir | | Dork : Powered by...
Design/Logic Flaw
PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via a crafted PATHINFO to service-list/category/...
Tplink LocalePath Disclosure
Vulnerability: Path Disclosure in locale.lua ------------------------------------------ Exploitation: Can be used to verify whether a path exists on the file system. ------------------------------------------ Vendor of Product: Tp-Link router ------------------------------------------ Affected...
CVE-2017-17776
Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter...
Path traversal
Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter...
CVE-2017-17776
Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter...
CVE-2017-17776
Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter...
CVE-2017-17776
Paid To Read Script 2.0.5 has a vulnerability that allows full path disclosure through an invalid admin/userview.php uid parameter. The CVE entry notes a information disclosure risk (confidentiality impact) with a CVSS v2 base score 5.0 and CVSS v3 base score 5.3. Connected sources corroborate th...
CVE-2017-17776
Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter...
CVE-2017-17696
Techno - Portfolio Management Panel through 2017-11-16 allows full path disclosure via an invalid s parameter to panel/search.php...
CVE-2017-17696
Techno - Portfolio Management Panel through 2017-11-16 allows full path disclosure via an invalid s parameter to panel/search.php...
Path traversal
Techno - Portfolio Management Panel through 2017-11-16 allows full path disclosure via an invalid s parameter to panel/search.php...
CVE-2017-17696
Techno - Portfolio Management Panel is affected by an information disclosure vulnerability through an invalid s parameter to panel/search.php, enabling disclosure of sensitive paths. The CVE notes impact as a path disclosure; affected versions include 2017-11-16 and earlier. Connected sources (CN...
