wildfly: Arbitrary file read via path traversal

It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via path traversal...

FinecmsV5.0.8 has an arbitrary file read vulnerability

FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework. An arbitrary file read vulnerability exists in FinecmsV5.0.8. An attacker can exploit this vulnerability to obtain sensitive database information...

CVE-2016-7825

Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted commands...

finecms 5.0.6 backend has arbitrary file read and CSRF vulnerabilities

FineCMS is a content management system based on PHP+MySql. FineCMS 5.x version of the foreground exists arbitrary file reading and CSRF vulnerability, an attacker can exploit the vulnerability by replacing... /The vulnerability can be exploited to read arbitrary configuration table files, execute...

wildfly: Arbitrary file read via path traversal

It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via path traversal...

wildfly: Arbitrary file read via path traversal

It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via path traversal...

wildfly: Arbitrary file read via path traversal

It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via path traversal...

wildfly: Arbitrary file read via path traversal

It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via path traversal...

Arbitrary File Read

Moodle is vulnerable to arbitrary file reads. Authenticated users can read arbitrary files through the backup-restoration feature. This is because the backup/converter/moodle1/lib.php doesn't correctly validate pathnames...

Riverbed SteelHead Arbitrary File Read Vulnerability

Riverbed SteelHead VCX is prone to an authenticated arbitrary file read vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Ecshop has an arbitrary file read vulnerability

ECShop is a B2C independent online store system developed based on PHP language and MYSQL database framework, suitable for enterprises and individuals to quickly build a personalized online store. An arbitrary file read vulnerability exists in Ecshop version 2.7.3, which can be exploited by...

Riverbed SteelHead VCX 9.6.0a - Arbitrary File Read

Riverbed SteelHead VCX 9.6.0a - Arbitrary File Read Exploit title : Arbitry file reading by authenticated users on Riverbed SteelHead VCX Vendor: Riverbed Author: Gregory DRAPERI Date: 03/2017 Software Link:...

Riverbed SteelHead VCX 9.6.0a - Arbitrary File Read Exploit

Exploit for linux platform in category web applications Exploit title : Arbitry file reading by authenticated users on Riverbed SteelHead VCX Vendor: Riverbed Author: Gregory DRAPERI Date: 03/2017 Software Link:...

Riverbed SteelHead VCX 9.6.0a - Arbitrary File Read

Exploit title : Arbitry file reading by authenticated users on Riverbed SteelHead VCX Vendor: Riverbed Author: Gregory DRAPERI Date: 03/2017 Software Link: https://www.riverbed.com/gb/products/steelhead/Free-90-day-Evaluation-SteelHead-CX-Virtual-Edition.html Version: SteelHead VCX VCX255U x8664...

CVE-2017-9295

XXE vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Replication Manager before 8.5.2-00 allows authenticated remote users to read arbitrary files...

XXE Vulnerability in Depart.asmx, a Universal Online Learning Platform for MicroXia

Micro Xia Online Learning Platform is an online education system based on B/S architecture. The product/SOPA/Depart.asmx suffers from XXE injection vulnerability, which can be exploited by an attacker to remotely read arbitrary files from the server...

Roundcube Webmail Information Disclosure Vulnerability (CNVD-2017-08083)

RoundCube Webmail is a browser-based IMAP client mail client that supports address book management, message searching, spell checking and more. An information disclosure vulnerability exists in the program/steps/addressbook/photo.inc file in Roundcube Webmail versions prior to 1.0.6 and 1.1.x...

Trend Micro InterScan Messaging Security Suite Directory Traversal Vulnerability

Trend Micro InterScan Messaging Security Suite is a hybrid SaaS email security solution from Trend Micro. A directory traversal vulnerability exists in Trend Micro InterScan Messaging Security Suite, which originates when the program fails to adequately validate user-supplied input. An attacker...

Tryton Arbitrary File Read Vulnerability

Tryton is a set of general-purpose application platform based on Python and PostgreSQL. It is an independent branch project of OpenERP Enterprise Resource Planning ERP and Customer Relationship Management CRM system, which contains modules for financial management, marketing management, customer...

DEBIAN-CVE-2016-7977

Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently read arbitrary files via the use of the .libfile operator in a crafted postscript document...