CVE-2020-10387

CVE-2020-10387 describes a path traversal vulnerability in Chadha PHPKB Standard Multi-Language 9, exposed via the admin/download.php endpoint. The flaw allows traversal of the server file system through the GET parameter “file” (using dot-dot-slash sequences), enabling arbitrary file download. P...

CVE-2020-10387: Improper Limitation of a Pathname to a Restricted Directory

Path Traversal in admin/download.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to download files from the server using a dot-dot-slash sequence ../ via the GET parameter file...

PT-2018-15403

Name of the Vulnerable Software and Affected Versions S-CMS version 1.0 Description The issue allows unauthorized access to certain files, including PHP source code, by manipulating the DownName parameter in the "admin/download.php" endpoint with a mixed-case file extension. For example, using...

CVE-2018-20478: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in S-CMS 1.0. It allows reading certain files, such as PHP source code, via the admin/download.php DownName parameter with a mixed-case extension, as demonstrated by a DownName=download.Php value...

PT-2017-7554

Name of the Vulnerable Software and Affected Versions AlegroCart version 1.2.8 Description The issue allows remote administrators to execute arbitrary SQL commands via the download parameter in the check download and possibly check filename function in upload/admin2/model/products/model admin...

PT-2013-1943

Name of the Vulnerable Software and Affected Versions e107 version 1.0.2 Description The issue allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks. This is achieved through multiple cross-site request forgery CSRF vulnerabilities ...