CVE-2013-2565

CVE-2013-2565 concerns Mambo CMS v4.6.5. Connected documents confirm the vulnerability resides in scripts thumbs.php, editorFrame.php, editor.php, images.php, and manager.php, which disclose the webserver’s root path. The available sources do not provide exploitation details, affected versions be...

PT-2019-6894

Name of the Vulnerable Software and Affected Versions Mambo CMS version 4.6.5 Description A vulnerability in the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver. Recommendations For Mambo CMS version 4.6.5, consider restricting...

CVE-2013-2565: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver...

CVE-2019-7535

index.php in Gurock TestRail 5.3.0.3603 returns potentially sensitive information for an invalid request, as demonstrated by full path disclosure and the identification of PHP as the backend technology...

CVE-2019-7535: Exposure of Sensitive Information to an Unauthorized Actor

index.php in Gurock TestRail 5.3.0.3603 returns potentially sensitive information for an invalid request, as demonstrated by full path disclosure and the identification of PHP as the backend technology...

PT-2019-18631

Name of the Vulnerable Software and Affected Versions Gurock TestRail version 5.3.0.3603 Description The issue concerns the disclosure of potentially sensitive information when an invalid request is made to index.php. This can lead to full path disclosure and the identification of PHP as the...

BEWARD N100 H.264 VGA IP Camera M2.1.6 Arbitrary File Disclosure

Summary The N100 compact color IP camera with support for a more efficient compression format is optimized for low-speed networks, thanks to which it transmits a real-time image over the network with minimal delays. The camera supports the switching of the broadcast modes, and in the event of a...

Path traversal

Lei Feng TV CMS aka LFCMS 3.8.6 allows full path disclosure via the /install.php?s=/1 URI...

CVE-2018-20606

imcat 4.4 allows full path disclosure via a dev.php?tools-ipaddr&api=Pcoln&uip= URI...

CVE-2018-20602

Lei Feng TV CMS aka LFCMS 3.8.6 allows full path disclosure via the /install.php?s=/1 URI...

CVE-2018-20606

imcat 4.4 allows full path disclosure via a dev.php?tools-ipaddr&api=Pcoln&uip= URI...

Path traversal

imcat 4.4 allows full path disclosure via a dev.php?tools-ipaddr&api=Pcoln&uip= URI...

CVE-2018-20602

Lei Feng TV CMS aka LFCMS 3.8.6 allows full path disclosure via the /install.php?s=/1 URI...

CVE-2018-20606

CVE-2018-20606 affects imcat version 4.4, with information disclosure through a full path reveal via the URI dev.php?tools-ipaddr&api=Pcoln&uip=. Multiple trusted sources (NVD, RH, CNVD, OSV, CVE lists) describe this as a path disclosure vulnerability with network access and no authentication, re...

CVE-2018-20606

imcat 4.4 allows full path disclosure via a dev.php?tools-ipaddr&api=Pcoln&uip= URI...

CVE-2018-20602

CVE-2018-20602 affects Lei Feng TV CMS (LFCMS) 3.8.6. The vulnerability is an information disclosure via the URI /install.php?s=/1, resulting in full path disclosure. Multiple connected records corroborate this issue across sources (NVD entry, RH Red Hat advisory, CNVD/CNVD-2019-00991, PRION, etc...

CVE-2018-20602

Lei Feng TV CMS aka LFCMS 3.8.6 allows full path disclosure via the /install.php?s=/1 URI...

CVE-2018-20606: Exposure of Sensitive Information to an Unauthorized Actor

imcat 4.4 allows full path disclosure via a dev.php?tools-ipaddr&api=Pcoln&uip= URI...

PT-2018-15470

Name of the Vulnerable Software and Affected Versions imcat version 4.4 Description The issue allows for full path disclosure through a specific URI. The affected endpoint is "dev.php?tools-ipaddr&api=Pcoln&uip=" and it is related to the uip variable. Recommendations For imcat version 4.4, consid...

PT-2018-15466

Name of the Vulnerable Software and Affected Versions Lei Feng TV CMS aka LFCMS version 3.8.6 Description The issue allows for full path disclosure via the "/install.php?s=/1" API endpoint. This could potentially reveal sensitive information about the system's directory structure. Recommendations...