CVE-2015-6914

CVE-2015-6914 affects Mindbite SiteFactory CMS 5.5.9. The vulnerability is an absolute path traversal in the assets/download.aspx endpoint, where a full pathname supplied in the file parameter allows remote attackers to read arbitrary files on the server. The entry cites a CVSSv2 base score of 7....

Amazon Linux: Security Advisory (ALAS-2014-442)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress IBS Mappro Plugin <= 0.9 - Absolute Path Traversal

This vulnerability is in lib/download.php. It allows an attacker to read arbitrary files via a full pathname in the "file" parameter. Solution Update the plugin...

WordPress Swim Team Plugin <= 1.44.10777 - Absolute Path Traversal

This vulnerability is in include/user/download.php. It allows an attacker to read arbitrary files via a full pathname in the "file" parameter. Solution Update the plugin...

Path traversal

Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows remote attackers to delete arbitrary files via a full pathname in the imagepath parameter in a cancel action...

CVE-2014-1836

ImpressCMS 1.3.5 and earlier contain an absolute path traversal in htdocs/libraries/image-editor/image-edit.php via the image_path parameter in a cancel action, enabling remote attackers to delete arbitrary files. This is associated with CVE-2014-1836 and is documented in multiple advisories (GHS...

WordPress Plugin Paypal Currency Converter Basic For WooCommerce Absolute Path Traversal Vulnerability

WordPress is a set of blogging platform developed by WordPress Software Foundation using PHP language, which supports setting up personal blog sites on PHP and MySQL servers.Paypal Currency Converter Basic For WooCommerce is one of the plugins that supports using Paypal payments in the WooCommerc...

CVE-2015-5065

Absolute path traversal vulnerability in proxy.php in the google currency lookup in the Paypal Currency Converter Basic For WooCommerce plugin before 1.4 for WordPress allows remote attackers to read arbitrary files via a full pathname in the requrl parameter...

Path traversal

Absolute path traversal vulnerability in proxy.php in the google currency lookup in the Paypal Currency Converter Basic For WooCommerce plugin before 1.4 for WordPress allows remote attackers to read arbitrary files via a full pathname in the requrl parameter...

CVE-2015-5065

CVE-2015-5065 describes an absolute path traversal vulnerability in the WordPress plugin “Paypal Currency Converter Basic For WooCommerce” (WooCommerce integration). In proxy.php, the google currency lookup exposes a flaw that allows remote attackers to read arbitrary files by supplying a full pa...

WordPress WooCommerce Plugin <= 1.3 - Absolute Path Traversal

This vulnerability is in proxy.php in the google currency lookup in the Paypal Currency Converter Basic For WooCommerce plugin. It allows an attacker to read arbitrary files in the "requrl" parameter via a full pathname. Solution Update the plugin...

Create 'my.txt' Working Directory 37 Bytes

Create 'my.txt' Working Directory 37 Bytes. Shellcode exploit for linx86 platform / Title: Create 'my.txt' in present working directory of vulnerable software Length: 37 bytes Date: 3 April 2015 Author: Mohammad Reza Ramezani mr.ramezani.edu at gmail com - g+ Tested On: kali-linux-1.0.6-i386...

CVE-2015-0557

Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to conduct absolute path traversal attacks and write to arbitrary files via multiple leading slashes in a path in an ARJ archive...

DEBIAN-CVE-2015-0557

Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to conduct absolute path traversal attacks and write to arbitrary files via multiple leading slashes in a path in an ARJ archive...

Path traversal

Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to conduct absolute path traversal attacks and write to arbitrary files via multiple leading slashes in a path in an ARJ archive...

CVE-2015-0557

Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to conduct absolute path traversal attacks and write to arbitrary files via multiple leading slashes in a path in an ARJ archive...

CVE-2015-0557

Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to conduct absolute path traversal attacks and write to arbitrary files via multiple leading slashes in a path in an ARJ archive...

Cimon CmnView DLL Hijacking Vulnerability

CmnView is a WEB-based SCADA application. The CmnView application contains a DLL that fails to specify an absolute path, allowing an attacker to exploit the vulnerability to build a malicious application and place it in a specific path, which could allow the application to maliciously load the DL...

CVE-2015-2304

Absolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote attackers to write to arbitrary files via a full pathname in an archive...

ShareLaTeX Absolute Path Traversal Vulnerability

ShareLaTeX is an open source web-based real-time collaborative LaTex editor developed by the ShareLaTeX team, which supports local editing, real-time collaboration and compilation of LaTeX documents. An absolute path traversal vulnerability exists in ShareLaTeX 0.1.3 and earlier versions. When th...