JPress suffers from an XML entity injection vulnerability

JPress a use of Java development, similar to WordPress products. JPress has an XML entity injection vulnerability that can be exploited by an attacker to read server files...

Kaixin Electronic Document Inventory in Arbitrary File Download Vulnerability

Qixing electronic document library can be used to store departmental manuals, system specifications, mechanical drawings and other edoc. The Qixing Electronic Document Library is vulnerable to an arbitrary file download vulnerability, which can be exploited by an attacker to download any file on...

Unauthorized Arbitrary File Read Vulnerability in jeewms

jeewms is a JAVA-based warehouse management system . jeewms has an unauthorized arbitrary file read vulnerability that can be exploited by an attacker to read any file on the server without authorization...

CVE-2020-11991

When using the StreamGenerator, the code parse a user-provided XML. A specially crafted XML, including external system entities, could be used to access any file on the server system...

Intranda Goobi Viewer Core Path Traversal Vulnerability

Intranda Goobi Viewer Core is a Web-based digital library system from Intranda, Germany. A path traversal vulnerability exists in Intranda Goobi Viewer Core versions prior to 4.8.3. A remote attacker could exploit this vulnerability to access files on the server...

Directory Traversal Vulnerability in Intelligent Meter Collective Reading Management System of Qingdao Automation Instrumentation Co.

Intelligent meter cluster management system is an industrial control management system that controls statistics and manages some of the data in the energy industry. There is a directory traversal vulnerability in the Intelligent Meter Management System of Qingdao Automation Instrumentation Co.,...

Directory Traversal Vulnerability in MCMS

MCMS is a website building system of MINGFEI TECHNOLOGY CO. MCMS suffers from a directory traversal vulnerability. An attacker can exploit the vulnerability to read the contents of any file on the server...

Arbitrary File Read Vulnerability in CloudCare Inspection Information System

Guangzhou Daan Clinical Laboratory Center Co., Ltd. is a high-tech enterprise group engaged in professional medical services, public health services and related technical support services. YunKang test information system there are arbitrary file reading vulnerability, an attacker can exploit the...

Directory Traversal Vulnerability in Intelligent Meter Management System of Qingdao Automation Instrument Co.

Qingdao Automatic Instrumentation Co., Ltd. is a new joint-stock enterprise integrating R&D and manufacturing. There is a directory traversal vulnerability in the Intelligent Meter Collector Management System of Qingdao Automation Instrument Co., Ltd. that can be exploited by attackers to obtain...

The vulnerability of the building management software (management of access control, security systems, video surveillance, and automation) Andover Continuum System, related to the possibility of interference with XML data processing by the application, allows a intruder to gain access to the files in the application server’s file system.

The vulnerability of the building management software management of access control, security systems, video surveillance, and automation Andover Continuum System is related to the possibility of interference with XML data processing by the application. Exploiting this vulnerability can allow a...

Arbitrary File Download Vulnerability in WMCMS

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS arbitrary file download vulnerability, attackers can use the vulnerability to download sensitive files under the server...

Arbitrary File Read Vulnerability in jpress

JPress a product developed using Java, similar to WordPress. Born to integrate the WeChat ecosystem, simple and easy to get started. Dedicated to creating an autonomous self-owned marketing platform for enterprises, using technology to help enterprises marketing cash. jpress there is an arbitrary...

Arbitrary File Download Vulnerability in ZrLog V2.1.1

ZrLog is a blogging program developed using Java. ZrLog V2.1.1 suffers from an arbitrary file download vulnerability, which can be exploited by an attacker to download any file on the server via a constructed path...

Arbitrary File Read Vulnerability in ClanSphere

ClanSphere is a web content management system primarily used for building tribal and eSports websites. ClanSphere suffers from an arbitrary file read vulnerability that can be exploited by an attacker to read any file on the server...

Arbitrary File Read Vulnerability in HkCMS

HkCMS has been committed to providing free and open source content management system for enterprise station building, HkCMS has excellent expansion and secondary development capabilities, can be adapted to enterprise lightweight system development and deployment. HkCMS arbitrary file reading...

HkCMS suffers from an arbitrary file download vulnerability

HkCMS has been committed to providing free and open source content management system for enterprise station building, HkCMS has excellent expansion and secondary development capabilities, can be adapted to enterprise lightweight system development and deployment. HkCMS arbitrary file download...

Arbitrary File Read Vulnerability in ShopXO

ShopXO is an open source enterprise-level open source e-commerce system. ShopXO arbitrary file read vulnerability, an attacker can use this vulnerability to obtain any file on the server...

UBUNTU-CVE-2018-14669

ClickHouse MySQL client before versions 1.1.54390 had "LOAD DATA LOCAL INFILE" functionality enabled that allowed a malicious MySQL database read arbitrary files from the connected ClickHouse server...

Arbitrary File Download Vulnerability in Sida Fluoroplastics Co.

Remote server WEB service does not do suffix filtering and directory control on user-submitted download files, leading to malicious attackers to construct paths to download arbitrary server files. http://60.191.211.210:8088/yyoa/DownExcelBeanServlet?contenttype=username&contentvalue=&state=1&peri...

Directory Traversal Vulnerability in Xinhuo Co-ordination Office System Backend

Xinhuo Co-operation Office System is an open source and cross-platform office system. There is a directory traversal vulnerability in the background of the Xinhao Collaboration Office System, an attacker logging in to the system by modifying the file path when downloading files can traverse the...