Unspecified Vulnerability in Total.js Platform

Total.js Platform is a suite of JavaScript Web platforms. The platform includes Total.js framework, Total.js apps, SQL Agent and NoSQL embedded DB. A security vulnerability exists in the index.js file in versions of Total.js Platform prior to 3.2.3. No details of the vulnerability are provided at...

Path Traversal

total.js is vulnerable to path traversal attacks. The vulnerability exists in index.js where req.url is insufficiently sanitized, allowing path traversal attacks...

CVE-2019-8903

index.js in Total.js Platform before 3.2.3 allows path traversal...

CVE-2019-8903

index.js in Total.js Platform before 3.2.3 allows path traversal...

Path traversal

index.js in Total.js Platform before 3.2.3 allows path traversal...

CVE-2019-8903

index.js in Total.js Platform before 3.2.3 allows path traversal...

CVE-2019-8903

Summary: CVE-2019-8903 affects Total.js Platform before 3.2.3 and is a path traversal/LFI issue in index.js. Multiple sources (NVD, Nuclei template, GHSA advisory, OpenVAS, AttackersKB) confirm that insufficient input sanitization in URLs allows an attacker to access files outside the public dire...

Total.js requestcontinue Directory Traversal Vulnerability

Total.js is prone to a directory traversal vulnerability. Attackers can exploit this issue and read files remotely. Recent assessments: Mad-robot at July 05, 2020 2:29pm UTC reported: Totaljs – Unathenticated Directory Traversal DESCRIPTION User can make requests like “GET...