CVE-2016-7802

Directory traversal vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to read arbitrary files via unspecified vectors...

PT-2017-9377

Name of the Vulnerable Software and Affected Versions Buffalo WNC01WH versions 1.0.0.0 through 1.0.0.8 Description A directory traversal issue allows authenticated attackers to read arbitrary files by sending specially crafted POST requests. Recommendations For Buffalo WNC01WH versions 1.0.0.0...

PT-2017-9376

Name of the Vulnerable Software and Affected Versions Buffalo WNC01WH devices version 1.0.0.8 and earlier Description A directory traversal issue allows authenticated attackers to read arbitrary files by sending specially crafted commands. Recommendations For Buffalo WNC01WH devices version 1.0.0...

CVE-2017-9428

A directory traversal vulnerability exists in core\admin\ajax\developer\extensions\file-browser.php in BigTree CMS through 4.2.18 on Windows, allowing attackers to read arbitrary files via ..\ sequences in the directory parameter...

PT-2017-15341

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 16.1R1 Description An XML External Entity Injection issue may allow an authenticated user to read arbitrary files on the device. Recommendations For versions prior to 16.1R1, update to version 16.1R1 or later to...

CVE-2017-5966

Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to read arbitrary files via an absolute path traversal attack on sitecore/shell/download.aspx with the file parameter...

UBUNTU-CVE-2015-5382

program/steps/addressbook/photo.inc in Roundcube Webmail before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via the alt parameter when uploading a vCard...

CVE-2016-7977

Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently read arbitrary files via the use of the .libfile operator in a crafted postscript document...

PT-2017-16794

Name of the Vulnerable Software and Affected Versions Sitecore CRM version 8.1 Rev 151207 Description The issue allows remote authenticated administrators to read arbitrary files via an absolute path traversal attack. This is achieved by exploiting the file parameter in the...

CVE-2017-9030: Improper Limitation of a Pathname to a Restricted Directory

The Codextrous B2J Contact aka b2jcontact extension before 2.1.13 for Joomla! allows a directory traversal attack that bypasses a uniqid protection mechanism, and makes it easier to read arbitrary uploaded files...

CVE-2017-2163

Directory traversal vulnerability in SOY CMS Ver.1.8.1 to Ver.1.8.12 allows authenticated attackers to read arbitrary files via shopid...

CVE-2017-2090

Directory traversal vulnerability in CubeCart versions prior to 6.1.4 allows remote authenticated attackers to read arbitrary files via unspecified vectors...

CVE-2016-7842

AttacheCase contains a directory traversal vulnerability (CWE-22) that allows reading arbitrary files via crafted ATC files. Affected products: AttacheCase ver. 2.8.2.8 and earlier, and ver. 3.2.0.4 and earlier. Root cause: flaw in processing filenames in ATC files. Impact reported in sources inc...

CVE-2016-7842: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in AttacheCase 2.8.2.8 and earlier and 3.2.0.4 and earlier allows remote attackers to read arbitrary files via specially crafted ATC file...

CVE-2017-2119: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in WBCE CMS 1.1.10 and earlier allows remote attackers to read arbitrary files via unspecified vectors...

PT-2017-15184

Name of the Vulnerable Software and Affected Versions CubeCart versions prior to 6.1.5 Description A directory traversal issue allows an attacker with administrator rights to read arbitrary files via unspecified vectors. Recommendations For versions prior to 6.1.5, update to version 6.1.5 or late...

PT-2017-15157

Name of the Vulnerable Software and Affected Versions CubeCart versions prior to 6.1.4 Description A directory traversal issue allows remote authenticated attackers to read arbitrary files. Recommendations For versions prior to 6.1.4, update to version 6.1.4 or later to resolve the issue...

PT-2017-8706

Name of the Vulnerable Software and Affected Versions Symantec Messaging Gateway versions prior to 10.6.2 Description The issue allows remote authenticated users to read arbitrary files. This is achieved by exploiting a directory traversal vulnerability in the charting component. The vulnerabilit...

PT-2017-9871

Name of the Vulnerable Software and Affected Versions IBM Tivoli Application Dependency Discovery Manager versions 7.2.2 through 7.3 Description The issue allows a remote attacker to include arbitrary files, potentially enabling the attacker to read any file on the system. Recommendations For...

MyBB Directory Traversal Vulnerability

MyBB is a popular web-based very good free forum software developed with PHP and MySQL. A directory traversal vulnerability exists in the backend of MyBB versions prior to 1.8.11, which can be exploited by a remote attacker to submit a special directory traversal request to read arbitrary files...