The vulnerability of the TempFileName parameter of the CGI script cgiRecvFile.exe in the Worry-Free Business Security antivirus protection system allows a hacker to read arbitrary files in the target system.

The vulnerability of the TempFileName parameter in the CGI executable cgiRecvFile.exe exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to read arbitrary files on the target system by sending specially crafted HTTP requests...

Skybox Platform Directory Traversal Vulnerability

Skybox PlatformAn enterprise-grade network security management platform from US-based Skybox Security. The platform features attack vector analysis, firewall management, vulnerability and threat management, and more. A directory traversal vulnerability exists in...

Directory traversal

An issue was discovered in Skybox Platform before 7.5.201. Directory Traversal exists in /skyboxview/webskybox/attachmentdownload and /skyboxview/webskybox/filedownload via the tempFileName parameter...