7957 matches found
Gxlcms Arbitrary File Read Vulnerability
Gxlcms is an enterprise website creation system. A security vulnerability exists in Gxlcms that originates from the program using an insecure method to restrict access. The vulnerability can be exploited by a remote attacker to read arbitrary files by sending an 's' parameter with a changed...
OpenText Document Sciences xPression Directory Traversal Vulnerability
OpenText Document Sciences xPression formerly known as EMC Document Sciences xPression is a document output management and customer communication solution from OpenText Canada. The solution integrates an organization's Customer Relationship Management CRM, Enterprise Content Management ECM, and...
Apache OpenMeetings < 3.1.1 Multiple Vulnerabilities
Apache OpenMeetings is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:openmeetings";...
CVE-2017-14754
OpenText Document Sciences xPression formerly EMC Document Sciences xPression v4.5SP1 Patch 13 older versions might be affected as well is prone to Arbitrary File Read: /xAdmin/html/cmdatasourcegroupxsd.jsp, parameter: xsddatasourceschemafile filename. In order for this vulnerability to be...
CVE-2017-14754
OpenText Document Sciences xPression formerly EMC Document Sciences xPression v4.5SP1 Patch 13 older versions might be affected as well is prone to Arbitrary File Read: /xAdmin/html/cmdatasourcegroupxsd.jsp, parameter: xsddatasourceschemafile filename. In order for this vulnerability to be...
Design/Logic Flaw
OpenText Document Sciences xPression formerly EMC Document Sciences xPression v4.5SP1 Patch 13 older versions might be affected as well is prone to Arbitrary File Read: /xAdmin/html/cmdatasourcegroupxsd.jsp, parameter: xsddatasourceschemafile filename. In order for this vulnerability to be...
CVE-2017-14979
Gxlcms uses an unsafe character-replacement approach in an attempt to restrict access, which allows remote attackers to read arbitrary files via modified pathnames in the s parameter to index.php, related to Lib/Admin/Action/TplAction.class.php and Lib/Admin/Common/function.php...
CVE-2017-14754
OpenText Document Sciences xPression formerly EMC Document Sciences xPression v4.5SP1 Patch 13 older versions might be affected as well is prone to Arbitrary File Read: /xAdmin/html/cmdatasourcegroupxsd.jsp, parameter: xsddatasourceschemafile filename. In order for this vulnerability to be...
CVE-2017-14754
Affected product: OpenText Document Sciences xPression (formerly EMC Document Sciences xPression), v4.5SP1 Patch 13 (and possibly older versions). Vulnerability type & cause: Arbitrary File Read due to a directory traversal flaw in the xsd_datasource_schema_file parameter used by /xAdmin/html/cm_...
OpenText Document Sciences xPression 4.5SP1 Patch 13 Arbitrary File Read Vulnerability
Exploit for java platform in category web applications Title: OpenText Document Sciences xPression formerly EMC Document Sciences xPression - Arbitrary File Read Author: Marcin Woloszyn Date: 27. September 2017 CVE: CVE-2017-14754 Affected Software: ================== OpenText Document Sciences...
OpenText Document Sciences xPression 4.5SP1 Patch 13 Arbitrary File Read
Title: OpenText Document Sciences xPression formerly EMC Document Sciences xPression - Arbitrary File Read Author: Marcin Woloszyn Date: 27. September 2017 CVE: CVE-2017-14754 Affected Software: ================== OpenText Document Sciences xPression formerly EMC Document Sciences xPression Explo...
Gongjin Electronics BE126 WIFI repeater Arbitrary File Read Vulnerability
Gongjin Electronics BE126 WIFI repeater is a wireless internet repeater from Gongjin Electronics China. A security vulnerability exists in Gongjin Electronics BE126 WIFI repeater version 1.0. The vulnerability can be exploited to read the entire file system with a specially crafted 'getpage'...
PHP Dashboards NEW 4.4 Arbitrary File Read
Exploit Title: PHP Dashboards NEW 4.4 - Arbitrary File Read Dork: N/A Date: 11.09.2017 Vendor Homepage: http://dataninja.biz/ Software Link: https://codecanyon.net/item/php-dashboards-v40-collaborative-social-dashboards/19314871 Demo: http://phpdashboardv4.dataninja.biz/ Version: 4.4 Category:...
PHP Dashboards NEW 4.4 - Arbitrary File Read
Exploit Title: PHP Dashboards NEW 4.4 - Arbitrary File Read Dork: N/A Date: 11.09.2017 Vendor Homepage: http://dataninja.biz/ Software Link: https://codecanyon.net/item/php-dashboards-v40-collaborative-social-dashboards/19314871 Demo: http://phpdashboardv4.dataninja.biz/ Version: 4.4 Category:...
PHP Dashboards NEW 4.4 - Arbitrary File Read
PHP Dashboards NEW 4.4 - Arbitrary File Read Exploit Title: PHP Dashboards NEW 4.4 - Arbitrary File Read Dork: N/A Date: 11.09.2017 Vendor Homepage: http://dataninja.biz/ Software Link: https://codecanyon.net/item/php-dashboards-v40-collaborative-social-dashboards/19314871 Demo:...
CVE-2017-11162
Directory traversal vulnerability in synphotoio in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allows remote authenticated users to read arbitrary files via unspecified vectors...
KODExplorer v4.06 Arbitrary File Read Vulnerability in Frontend
KodExplorer Kodo Cloud formerly Mango Cloud is a private cloud and online file management system based on Web technology developed by Shanghai Daimu Networks Co., Ltd. and is committed to providing users with secure and controllable, reliable and easy-to-use, highly scalable private cloud...
Arbitrary File Read Vulnerability in KodExplorer
KodExplorer Kodo Cloud formerly Mango Cloud is a private cloud and online file management system based on Web technology developed by Shanghai Daimu Networks Co., Ltd. and is committed to providing users with secure and controllable, reliable and easy-to-use, highly scalable private cloud...
74cms the latest version of a arbitrary file read
Any file read in C:\phpStudy\WWW\Application\Home\Controller\MembersController.class.php中的 saveavatar function ! Can be seen in Section 646 row, using the copy Function, the$path the file contents is copied to$filename. In the 638 exercise with$avatar splice form$path,in the first 643 and 644 lin...