CVE-2018-1000023

Bitpay/insight-api Insight-api version 5.0.0 and earlier contains a CWE-20: input validation vulnerability in transaction broadcast endpoint that can result in Full Path Disclosure. This attack appear to be exploitable via Web request...

PT-2018-9214

Name of the Vulnerable Software and Affected Versions: Insight-api versions 5.0.0 and earlier Description: The issue concerns a lack of input validation in the transaction broadcast endpoint, which can lead to Full Path Disclosure. This can be exploited via a web request. Recommendations: For...

CVE-2018-1000023: Improper Input Validation

Bitpay/insight-api Insight-api version 5.0.0 and earlier contains a CWE-20: input validation vulnerability in transaction broadcast endpoint that can result in Full Path Disclosure. This attack appear to be exploitable via Web request...

CVE-2018-6846

Z-BlogPHP 1.5.1 allows remote attackers to discover the full path via a direct request to zbsystem/function/lib/upload.php...

CVE-2018-6846

Z-BlogPHP 1.5.1 allows remote attackers to discover the full path via a direct request to zbsystem/function/lib/upload.php...

CVE-2018-6846

CVE-2018-6846 affects Z-BlogPHP 1.5.1 and enables remote attackers to disclose the full server path by directly requesting zb_system/function/lib/upload.php. Multiple sources (Red Hat, NVD, CNVD, CVE entries) confirm an information-disclosure path-traversal style exposure without wider exploitati...

CVE-2018-6846

Z-BlogPHP 1.5.1 allows remote attackers to discover the full path via a direct request to zbsystem/function/lib/upload.php...

PT-2018-17774

Name of the Vulnerable Software and Affected Versions Z-BlogPHP version 1.5.1 Description The issue allows remote attackers to discover the full path of the system via a direct request to "zb system/function/lib/upload.php". Recommendations For Z-BlogPHP version 1.5.1, consider restricting access...

MantisBT 2.10.0 'view_all_bug_page' Path Disclosure Vulnerability - Windows

MantisBT is prone to a path disclosure vulnerability. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

MantisBT 2.10.0 'view_all_bug_page' Path Disclosure Vulnerability - Linux

MantisBT is prone to a path disclosure vulnerability. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2018-6526

viewallbugpage.php in MantisBT 2.10.0-development before 2018-02-02 allows remote attackers to discover the full path via an invalid filter parameter, related to a filterensurevalidfilter call in currentuserapi.php...

CVE-2018-6526

viewallbugpage.php in MantisBT 2.10.0-development before 2018-02-02 allows remote attackers to discover the full path via an invalid filter parameter, related to a filterensurevalidfilter call in currentuserapi.php...

CVE-2018-6526

viewallbugpage.php in MantisBT 2.10.0-development before 2018-02-02 allows remote attackers to discover the full path via an invalid filter parameter, related to a filterensurevalidfilter call in currentuserapi.php...

CVE-2018-6526

viewallbugpage.php in MantisBT 2.10.0-development before 2018-02-02 allows remote attackers to discover the full path via an invalid filter parameter, related to a filterensurevalidfilter call in currentuserapi.php...

CVE-2018-6526

CVE-2018-6526 affects MantisBT; path disclosure in view_all_bug_page.php (2.10.0-development before 2018-02-02) via an invalid filter parameter tied to filter_ensure_valid_filter in current_user_api.php. The vulnerability allows remote attackers to discover the full filesystem path. Affected comp...

PT-2018-17614

Name of the Vulnerable Software and Affected Versions MantisBT version 2.10.0-development before 2018-02-02 Description The issue allows remote attackers to discover the full path via an invalid filter parameter. This is related to a filter ensure valid filter call in current user api.php. The...

PT-2018-9780

Name of the Vulnerable Software and Affected Versions: AWStats versions prior to 7.7 Description: A Full Path Disclosure issue allows remote attackers to determine the location of the config file, thereby obtaining the full path of the server. This can be achieved by exploiting the awstats.pl...

Atmail 7.1.1 PRO Cross Site Scripting

============================================================================ | Title : Atmail v7.1.1 PRO XSS Vulnerability | | Author : indoushka | | email : [email protected] | | Tested on : windows 10 FranASSais V.Pro | | Version : v7.1.1 | | Vendor : www.p30vel.ir | | Dork : Powered by...

Design/Logic Flaw

PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via a crafted PATHINFO to service-list/category/...

Tplink LocalePath Disclosure

Vulnerability: Path Disclosure in locale.lua ------------------------------------------ Exploitation: Can be used to verify whether a path exists on the file system. ------------------------------------------ Vendor of Product: Tp-Link router ------------------------------------------ Affected...