Z-BlogPHP Website Physical Path Disclosure Vulnerability

Z-BlogPHP is an open source PHP-based blogging system developed by the Z-Blog community. A security vulnerability exists in Z-BlogPHP version 1.5.1.1740. An attacker can exploit the vulnerability to obtain a physical path...

Webzyme Couch Path Disclosure Vulnerability

Webzyme Couch is the United States Webzyme Softwares, Inc. of a set of open source content management system CMS. A security vulnerability exists in Webzyme Couch. A remote attacker can exploit the vulnerability by sending a direct request to the includes/mysql2i/mysql2i.func.php or...

PT-2018-18248 · Z Blogphp · Z-Blogphp

Name of the Vulnerable Software and Affected Versions: Z-BlogPHP version 1.5.1.1740 Description: There is a potential issue in Z-BlogPHP where the physical path of the web site may be leaked, as demonstrated by accessing certain files such as admin footer.php. However, it's noted that the softwar...

Insight API transaction broadcast endpoint can result in Full Path Disclosure

Bitpay/insight-api Insight-api version 5.0.0 and earlier contains a CWE-20: input validation vulnerability in transaction broadcast endpoint that can result in Full Path Disclosure. This attack appear to be exploitable via Web request...

GHSA-8P2P-P8MG-X3CW Insight API transaction broadcast endpoint can result in Full Path Disclosure

Bitpay/insight-api Insight-api version 5.0.0 and earlier contains a CWE-20: input validation vulnerability in transaction broadcast endpoint that can result in Full Path Disclosure. This attack appear to be exploitable via Web request...

CVE-2018-7662

Couch through 2.0 allows remote attackers to discover the full path via a direct request to includes/mysql2i/mysql2i.func.php or addons/phpmailer/phpmailer.php...

CVE-2018-7662

Couch through 2.0 allows remote attackers to discover the full path via a direct request to includes/mysql2i/mysql2i.func.php or addons/phpmailer/phpmailer.php...

CVE-2018-7662

Couch through 2.0 allows remote attackers to discover the full path via a direct request to includes/mysql2i/mysql2i.func.php or addons/phpmailer/phpmailer.php...

CVE-2018-7662

Couch through 2.0 allows remote attackers to discover the full path via a direct request to includes/mysql2i/mysql2i.func.php or addons/phpmailer/phpmailer.php...

PT-2018-18193

Name of the Vulnerable Software and Affected Versions Couch versions prior to 2.0 Description The issue allows remote attackers to discover the full path of the system by making a direct request to specific files, such as 'includes/mysql2i/mysql2i.func.php' or 'addons/phpmailer/phpmailer.php'...

CVE-2018-7479

YzmCMS 3.6 allows remote attackers to discover the full path via a direct request to application/install/templates/s1.php...

CVE-2018-7479

YzmCMS 3.6 is affected by CVE-2018-7479, a path-disclosure/info-disclosure vulnerability. A remote attacker can discover the full server path by issuing a direct request to application/install/templates/s1.php. The issue is categorized as information disclosure with impact limited to confidential...

CVE-2018-7479

YzmCMS 3.6 allows remote attackers to discover the full path via a direct request to application/install/templates/s1.php...

CVE-2018-7479: Exposure of Resource to Wrong Sphere

YzmCMS 3.6 allows remote attackers to discover the full path via a direct request to application/install/templates/s1.php...

PT-2018-18094

Name of the Vulnerable Software and Affected Versions YzmCMS version 3.6 Description The issue allows remote attackers to discover the full path of the application via a direct request to "application/install/templates/s1.php". Recommendations For YzmCMS version 3.6, consider restricting access t...

CVE-2018-7434

zzcms 8.2 allows remote attackers to discover the full path via a direct request to 3/qqconnect2.0/API/class/ErrorCase.class.php or 3/ucenterapi/code/friend.php...

CVE-2018-7434

zzcms 8.2 allows remote attackers to discover the full path via a direct request to 3/qqconnect2.0/API/class/ErrorCase.class.php or 3/ucenterapi/code/friend.php...

CVE-2018-7434

The CVE-2018-7434 issue affects ZZCMS 8.2, described as an information-disclosure/path-traversal vulnerability. A remote attacker can discover the full server path by directly requesting 3/qq_connect2.0/API/class/ErrorCase.class.php or 3/ucenter_api/code/friend.php. Affected component: zzcms core...

CVE-2018-7434

zzcms 8.2 allows remote attackers to discover the full path via a direct request to 3/qqconnect2.0/API/class/ErrorCase.class.php or 3/ucenterapi/code/friend.php...

CVE-2018-7434: Improper Limitation of a Pathname to a Restricted Directory

zzcms 8.2 allows remote attackers to discover the full path via a direct request to 3/qqconnect2.0/API/class/ErrorCase.class.php or 3/ucenterapi/code/friend.php...