CVE-2018-17421

An issue was discovered in ZrLog 2.0.3. There is stored XSS in the file upload area via a crafted attached/file/ pathname...

CVE-2018-17421: Improper Neutralization of Input During Web Page Generation

An issue was discovered in ZrLog 2.0.3. There is stored XSS in the file upload area via a crafted attached/file/ pathname...

CVE-2019-6453

mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker can specify an irc:// URI that loads an arbitrary .ini file from a UNC share pathname. Exploitation depends on browser-specific URI handling Chrome is not exploitable...

CVE-2019-6453: Improper Neutralization of Argument Delimiters in a Command

mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker can specify an irc:// URI that loads an arbitrary .ini file from a UNC share pathname. Exploitation depends on browser-specific URI handling Chrome is not exploitable...

CVE-2019-8395: Improper Limitation of a Pathname to a Restricted Directory

An Insecure Direct Object Reference IDOR vulnerability exists in Zoho ManageEngine ServiceDesk Plus SDP before 10.0 build 10007 via an attachment to a request...

CVE-2018-20769: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is a Local File Inclusion vulnerability...

PT-2019-18097

Name of the Vulnerable Software and Affected Versions mIRC versions prior to 7.55 Description The issue allows remote command execution through argument injection by using custom URI protocol handlers. An attacker can specify an irc:// URI to load an arbitrary .ini file from a UNC share pathname...

CVE-2019-7403: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in PHPMyWind 5.5. It allows remote attackers to delete arbitrary folders via an admin/databasebackup.php?action=import&dopost=deldir&tbname=../ URI...

Directory traversal

ARC 5.21q allows directory traversal via a full pathname in an archive file...

CVE-2015-9275

ARC 5.21q allows directory traversal via a full pathname in an archive file...

UBUNTU-CVE-2015-9275

ARC 5.21q allows directory traversal via a full pathname in an archive file...

DEBIAN-CVE-2015-9275

ARC 5.21q allows directory traversal via a full pathname in an archive file...

CVE-2015-9275

ARC 5.21q allows directory traversal via a full pathname in an archive file...

PT-2019-7235

Name of the Vulnerable Software and Affected Versions ARC version 5.21q Description The issue allows directory traversal via a full pathname in an archive file. Recommendations For version 5.21q, at the moment, there is no information about a newer version that contains a fix for this vulnerabili...

CVE-2018-20128

An issue was discovered in UsualToolCMS v8.0. cmsadmin\asqlback.php allows remote attackers to delete arbitrary files via a backname directory-traversal pathname followed by a crafted substring...

CVE-2018-19960

The debugmode function in web/web.py in OnionShare through 1.3.1, when --debug is enabled, uses the /tmp/onionshareserver.log pathname for logging, which might allow local users to overwrite files or obtain sensitive information by using this pathname...

PT-2018-15130

Name of the Vulnerable Software and Affected Versions OpenRefine versions prior to 3.2 beta Description The issue allows directory traversal via a relative pathname in a ZIP archive. Recommendations For versions prior to 3.2 beta, update to version 3.2 beta or later to resolve the issue...

CVE-2018-19859: Improper Limitation of a Pathname to a Restricted Directory

OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive...

PT-2018-14283

Name of the Vulnerable Software and Affected Versions NUUO CMS versions 3.3 and prior Description The issue allows external input to construct a pathname that can be resolved outside the intended directory. This could enable an attacker to impersonate a legitimate user, obtain restricted...

Ruby: Command injection in Pathname

The command may be executed when the value passed to Pathname is the first character of "|". This is the same problem as https://bugs.ruby-lang.org/issues/14245, but here it is executed without warning. ruby $ ruby -v ruby 2.5.3p105 2018-10-18 revision 65156 x8664-darwin16 $ irb irbmain:001:0 ls ...