33189 matches found
CVE-2017-9097
In Anti-Web through 3.8.7, as used on NetBiter FGW200 devices through 3.21.2, WS100 devices through 3.30.5, EC150 devices through 1.40.0, WS200 devices through 3.30.4, EC250 devices through 1.40.0, and other products, an LFI vulnerability allows a remote attacker to read or modify files through a...
Adobe Captivate Quiz Reporting Feature 'internalserverread.php' Remote File Disclosure (APSB17-19)
The Adobe Captivate application running on the remote web server is affected by a remote file disclosure vulnerability in the quiz reporting feature due to improper validation of parameters passed to the 'internalserverread.php' script. An unauthenticated, remote attacker can exploit this issue,...
CVE-2017-2181
Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allow remote attackers to obtain local files via unspecified vectors, a different vulnerability than CVE-2017-2179 and CVE-2017-2182...
CVE-2017-2180
Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allow remote attackers to obtain local files via unspecified vectors...
CVE-2016-9710
CVE-2016-9710 : IBM Predictive Solutions Foundation (PMQ) in IBM Cognos BI Server is described as allowing a remote attacker to include arbitrary files by sending a crafted URL that selects a local file, potentially exposing sensitive information. This is evidenced in the NVD entry and IBM securi...
CVE-2015-7888
Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VVRU1AOE2 allows remote attackers to overwrite or create arbitrary files as the system-level user via a .. dot dot in the name of a file, compressed into a zipped file named cred.zip, and downloaded ...
CVE-2014-9983
Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive. This allows remote attackers to write to arbitrary files via a crafted archive...
Contao Directory Traversal Vulnerability
Contao is an open source content management system CMS developed using PHP. The system supports search engine , rights management and CSS framework . A directory traversal vulnerability exists in Contao versions prior to 3.2.19 and 3.4.x prior to 3.4.4. A remote attacker can exploit this...
XXE Vulnerability in the Purview.asmx File of the MicroXia Online Learning Platform
Micro Xia Online Learning Platform is an online education system based on B/S architecture. A XXE vulnerability exists in the Purview.asmx file of MicroXia Online Learning Platform. An attacker can exploit the vulnerability to remotely read arbitrary files on the server...
XXE Vulnerability in the ManageMenu.asmx File of MicroXia Online Learning Platform
Micro Xia Online Learning Platform is an online education system based on B/S architecture. A XXE vulnerability exists in the ManageMenu.asmx file of MicroXia Online Learning Platform, which can be exploited by an attacker to remotely read arbitrary files from the server...
XXE Vulnerability in Columns.asmx File of Microxia Online Learning Platform
Micro Xia Online Learning Platform is an online education system based on B/S architecture. A XXE vulnerability exists in the Columns.asmx file of MicroXia Online Learning Platform. An attacker can exploit the vulnerability to remotely read arbitrary files on the server...
WordPress MDC YouTube Downloader Plugin Directory Traversal Vulnerability
WordPress is a set of blogging platform developed by WordPress Software Foundation using PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.MDC YouTube Downloader is one of the video download plugins. A path traversal vulnerability exists in version 2.1.0 of...
WordPress WP e-Commerce Shop Styling Plugin Directory Traversal Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up a personal blog site.WP e-Commerce Shop Styling is one of the plug-ins used to improve the style of WP e-commerce store templates. A...
XXE Vulnerability in Employee.asmx File of Microxia Online Learning Platform
Micro Xia Online Learning Platform is an online education system based on B/S architecture. XXE vulnerability exists in the Employee.asmx file of MicroXia Online Learning Platform, which can be exploited by an attacker to remotely read arbitrary files on the server...
CVE-2017-6637
Cisco Prime Collaboration Provisioning (PCP) web interface vulnerability CVE-2017-6637 allows an authenticated, remote attacker to delete arbitrary files due to insufficient HTTP request input validation and lack of RBAC enforcement, via directory traversal on the affected system. Core issue: imp...
XXE Vulnerability in Microxia Online Learning Platform
Micro Xia Online Learning Platform is an online education system based on B/S architecture. XXE injection vulnerability exists in /Ajax/InResult.ashx, which can be exploited by an attacker to remotely read arbitrary files on the server...
FeiWa B2B2C mall system url parameter has remote file inclusion vulnerability
Flying Frog Mall System FeiWa B2B2C is an enterprise-level B2B2C e-commerce platform system, fully supporting PC, WAP, WeChat, APP and other terminal equipment. FeiWa B2B2C mall system url parameters exist remote file containment vulnerability. The vulnerability exists in the location "...
CVE-2017-8858
In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated privileged remote file write using the 'bprd' process...
