CVE-2023-3512

Relative path traversal vulnerability in Setelsa Security's ConacWin CB, in its 3.8.2.2 version and earlier, the exploitation of which could allow an attacker to perform an arbitrary download of files from the system via the "Download file" parameter...

Path traversal

Aqua Drive, in its 2.4 version, is vulnerable to a relative path traversal vulnerability. By exploiting this vulnerability, an authenticated non privileged user could access/modify stored resources of other users. It could also be possible to access and modify the source and configuration files o...

CVE-2023-3701 Relative path traversal in Aqua eSolutions

Aqua Drive, in its 2.4 version, is vulnerable to a relative path traversal vulnerability. By exploiting this vulnerability, an authenticated non privileged user could access/modify stored resources of other users. It could also be possible to access and modify the source and configuration files o...

CVE-2023-3701

The CVE-2023-3701 entry concerns Aqua Drive version 2.4, which is reported to be vulnerable to a relative path traversal. The vulnerability allows an authenticated non-privileged user to access or modify stored resources belonging to other users and could enable access or modification of source a...

CVE-2023-3512 Relative path traversal in Setelsa Security ConacWin CB

Relative path traversal vulnerability in Setelsa Security's ConacWin CB, in its 3.8.2.2 version and earlier, the exploitation of which could allow an attacker to perform an arbitrary download of files from the system via the "Download file" parameter...

CVE-2023-43825

Relative path traversal vulnerability in Shihonkanri Plus Ver9.0.3 and earlier allows a local attacker to execute an arbitrary code by having a legitimate user import a specially crafted backup file of the product...

CVE-2023-43825

Relative path traversal vulnerability in Shihonkanri Plus Ver9.0.3 and earlier allows a local attacker to execute an arbitrary code by having a legitimate user import a specially crafted backup file of the product...

PT-2023-29002 · Unknown · Shihonkanri Plus

Name of the Vulnerable Software and Affected Versions: Shihonkanri Plus versions prior to 9.0.3 Description: A relative path traversal issue allows a local attacker to execute arbitrary code by having a legitimate user import a specially crafted backup file of the product. Recommendations: For...

JVN#17434995: Shihonkanri Plus vulnerable to relative path traversal

Shihonkanri Plus provided by EKAKIN contains a relative path traversal vulnerability CWE-23. Impact An attacker may execute arbitrary code by having a legitimate user import a specially crafted backup file of the product. Solution Update the software Update the software to the latest version...

CVE-2015-5467

web\ViewAction in Yii aka Yii2 2.x before 2.0.5 allows attackers to execute any local .php file via a relative path in the view parameeter...

Path Traversal

cecil/cecil vulnerable to Relative Path Traversal. The vulnerability is caused by a lack of additional checks when verifying a file is within an expected location, which can lead to the access of files outside of the document root...

CVE-2021-28485

In Ericsson Mobile Switching Center Server MSC-S before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific parameter in the https request after authentication, which allows access to files on the system that are not intended to be accessible via the web application...

CVE-2021-28485

CVE-2021-28485 affects Ericsson MSC-S (Mobile Switching Center Server) via the SIS web application. The issue is a relative path traversal in an authenticated context, triggered by a specific parameter in HTTPS requests, enabling access to system files not intended for web access. Documented affe...

CVE-2023-4914

Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1...

Path traversal

Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1...

CVE-2023-4914 Relative Path Traversal in cecilapp/cecil

Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1...

CVE-2023-4914 Relative Path Traversal in cecilapp/cecil

Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1...

CVE-2023-4914

CVE-2023-4914 is a Relative Path Traversal vulnerability in the Cecil project (cecilapp/cecil) prior to version 7.47.1. The initial and connected sources consistently describe the issue as path traversal, but do not provide explicit root-cause details in these documents. Affected software/version...

CVE-2023-4897

CVE-2023-4897 describes a Relative Path Traversal in mintplex-labs/anything-llm prior to 0.0.1. The vulnerability stems from insufficient validation of the filename parameter in the data-exports endpoint, allowing a crafted request to traverse directories and access sensitive local files as demon...

AnythingLLM Security Vulnerability

AnythingLLM is a business-compliant document chatbot. A security vulnerability exists in versions of AnythingLLM prior to 0.0.1 that stems from the presence of relative path traversal...