1100 matches found
CVE-2018-18950: Improper Limitation of a Pathname to a Restricted Directory
KindEditor through 4.1.11 has a path traversal vulnerability in php/uploadjson.php. Anyone can browse a file or directory in the kindeditor/attached/ folder via the path parameter without authentication...
PT-2018-14739
Name of the Vulnerable Software and Affected Versions KindEditor versions prior to 4.1.12 Description The issue allows unauthorized access to files or directories within the kindeditor/attached/ folder via the path parameter in php/upload json.php, without requiring authentication. Recommendation...
Synology DiskStation Manager Information Disclosure Vulnerability
Synology DiskStation Manager DSM is an operating system for use on Network Storage Servers NAS from Synology. The operating system manages information such as data, files, photos, music, and more. An information disclosure vulnerability exists in SYNO.Core.ACL in Synology DSM versions prior to...
CVE-2018-13281
Information exposure vulnerability in SYNO.Core.ACL in Synology DiskStation Manager DSM before 6.2-23739-2 allows remote authenticated users to determine the existence and obtain the metadata of arbitrary files via the filepath parameter...
Rukovoditel Project Management CRM 2.3 - 'path' SQL Injection
Exploit Title: Rukovoditel Project Management CRM 2.3 - 'path' SQL Injection Dork: N/A Date: 2018-10-15 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.rukovoditel.net/ Software Link: https://www.rukovoditel.net/download.php Version: 2.3 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64...
PT-2018-14215
Name of the Vulnerable Software and Affected Versions JTBCPHP version 3.0.1.6 Description An issue allows arbitrary file deletion. This can be achieved via the /console/file/manage.php API endpoint with specific parameters, including type, action, and path. For instance, using the path parameter...
CVE-2018-16821
SeaCMS 6.64 allows arbitrary directory listing via upload/admin/admintemplate.php?path=../templets/../../ requests...
PT-2018-13762
Name of the Vulnerable Software and Affected Versions SeaCMS version 6.64 Description The issue allows for arbitrary directory listing. This can be achieved through specific requests to the upload/admin/admin template.php endpoint, where the path parameter is manipulated to access directories...
CVE-2018-16549
HScripts PHP File Browser Script v1.0 allows Directory Traversal via the index.php path parameter...
CVE-2018-16549: Improper Limitation of a Pathname to a Restricted Directory
HScripts PHP File Browser Script v1.0 allows Directory Traversal via the index.php path parameter...
PT-2018-13624
Name of the Vulnerable Software and Affected Versions HScripts PHP File Browser Script version 1.0 Description The issue allows Directory Traversal via the path parameter in index.php. Recommendations For HScripts PHP File Browser Script version 1.0, consider restricting access to the index.php...
Sandoba CP:Shop '. /cpshop/' module cross-site scripting vulnerability
Sandoba CP:Shop is a set of online store system of German Sandoba company. The system sales management, financial management and site search and other functions. The Sandoba CP:Shop 2016.1 version of the '. /cpshop/' module has a cross-site scripting vulnerability in the 'admin.php' file. The...
PT-2018-11215
Name of the Vulnerable Software and Affected Versions PublicCMS version 4.0.20180210 Description An issue was discovered that allows for "Directory Traversal" and "Arbitrary file read" via the "/admin/cmsWebFile/list.html" API endpoint, specifically when the path parameter is set to ../...
UBUNTU-CVE-2017-16652
An issue was discovered in Symfony 2.7.x before 2.7.38, 2.8.x before 2.8.31, 3.2.x before 3.2.14, and 3.3.x before 3.3.13. DefaultAuthenticationSuccessHandler or DefaultAuthenticationFailureHandler takes the content of the targetpath parameter and generates a redirect response, but no check is...
Vesta Control Panel Cross-Site Scripting Vulnerability (CNVD-2018-09183)
Vesta Control Panel is an open source web hosting control panel. A cross-site scripting vulnerability exists in Vesta Control Panel version 0.9.8-20. A remote attacker can exploit this vulnerability by sending the 'path' parameter to the view/file/index.php URI to execute PHP code...
Node.js third-party modules: [entitlements] Command injection on the 'path' parameter
Hello again, another command injection, this time on the entitlements module. Module module name: entitlements version: 1.2.0 npm page: https://www.npmjs.com/package/entitlements Module Description check the entitlements of a .app bundle Module Stats 26 downloads in the last day 328 downloads in...
Unintentional directory traversal by poisoned NUL byte in Dir
There is an unintentional directory traversal in some methods in Dir Dir.open, Dir.new, Dir.entries and Dir.empty? accept the path of the target directory as their parameter. If the parameter contains NUL \0 bytes, these methods recognize that the path is completed before the NUL bytes. So, if a...
CVE-2018-7422
A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to retrieve arbitrary files via the ajaxpath parameter to editor/extensions/pagebuilder/includes/ajaxshortcodepattern.php, aka absolute path traversal...
CVE-2018-1199
Spring Security Spring Security 4.1.x before 4.1.5, 4.2.x before 4.2.4, and 5.0.x before 5.0.1; and Spring Framework 4.3.x before 4.3.14 and 5.0.x before 5.0.3 does not consider URL path parameters when processing security constraints. By adding a URL path parameter with special encodings, an...