CVE-2020-26650

AtomXCMS 2.0 is affected by Arbitrary File Read via admin/dump.php...

CVE-2020-26650

AtomXCMS 2.0 is affected by Arbitrary File Read via admin/dump.php...

Design/Logic Flaw

AtomXCMS 2.0 is affected by Arbitrary File Read via admin/dump.php...

CVE-2020-26650

AtomXCMS 2.0 is affected by Arbitrary File Read via admin/dump.php...

CVE-2020-26650

AtomXCMS 2.0 is affected by an Arbitrary File Read vulnerability via admin/dump.php. The CVE describes a file-read flaw allowing unauthorized disclosure of information, with CVSS v3.1 base score 5.3 (Network attack, low complexity, no privileges required) and Confidentiality impact: Low. Affected...

PT-2020-16482

Name of the Vulnerable Software and Affected Versions AtomXCMS version 2.0 Description The issue is related to Arbitrary File Read. It can be exploited via the "admin/dump.php" endpoint. Recommendations For AtomXCMS version 2.0, consider restricting access to the "admin/dump.php" endpoint until a...

CVE-2020-26650: Improper Limitation of a Pathname to a Restricted Directory

AtomXCMS 2.0 is affected by Arbitrary File Read via admin/dump.php...

CloudBees Jenkins Storable Configs Plugin Arbitrary File Read Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . An arbitrary file read...

CloudBees Jenkins Copy data to workspace Plugin Arbitrary File Read Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . An arbitrary file read...

CVE-2020-6366

SAP NetWeaver Compare Systems versions - 7.20, 7.30, 7.40, 7.50, does not sufficiently validate uploaded XML documents. An attacker with administrative privileges can retrieve arbitrary files including files on OS level from the server and/or can execute a denial-of-service...

Pre-Authorization Arbitrary File Read - access web.xml via curl with no authentication.

https://asecurityteam.atlassian.net/browse/VULN-196971 h3. Issue Summary The Atlassian Confluence, Atlassian Jira, and Atlassian Crowd are vulnerable to a Pre-Authorization Arbitrary File Read attack vector. Specifically, the /s/ endpoint can be accessed in a specific manner that enables...

Arbitrary File Read Vulnerability in Fish Leap CMS

FishLeap CMS is a content management system specifically geared towards enterprise applications. Fishy CMS suffers from an arbitrary file read vulnerability, which can be exploited by an attacker to read arbitrary files on the server...

CVE-2020-16919: Undefined Security Weakness

An information disclosure vulnerability exists when the Windows Enterprise App Management Service improperly handles certain file operations. An attacker who successfully exploited this vulnerability could read arbitrary files. An attacker with unprivileged access to a vulnerable system could...

Arbitrary File Read Vulnerability in ZZCMS

ZZCMS is a content management system for Webmaster Merchants. ZZCMS has an arbitrary file reading vulnerability, which can be exploited by an attacker to traverse website files to obtain sensitive information...

Cross-site Scripting in Joplin

Joplin through 1.0.184 allows Arbitrary File Read via Cross-site Scripting XSS...

Arbitrary file readout vulnerability in the background pr***.php interface of the Tianqing Secure Isolation and Information Exchange System

Tianqing Security Isolation and Information Exchange System is the access control switch equipment with network isolation technology independently developed by Qixing Information Technology Co., Ltd, which provides high security isolation protection for key data. There is an arbitrary file readin...

XiaoCMS backend has arbitrary file read vulnerability

XiaoCms is a web content management system, provides enterprise building system, station system. An arbitrary file read vulnerability exists in the XiaoCMS backend. An attacker can exploit the vulnerability to read task files...

Arbitrary file reading vulnerability in the cu***.php interface of the background of the Tianqing security isolation and information exchange system

Tianqing Security Isolation and Information Exchange System is the access control switch equipment with network isolation technology independently developed by Qixing Information Technology Co., Ltd, which provides high security isolation protection for key data. There is an arbitrary file readin...

Arbitrary file readout vulnerability in the background sh***.php interface of the Tianqing security isolation and information exchange system

Tianqing Security Isolation and Information Exchange System is the access control switch equipment with network isolation technology independently developed by Qixing Information Technology Co., Ltd, which provides high security isolation protection for key data. There is an arbitrary file readin...

The vulnerability of the ESX Agent Manager (EAM) extension, a management tool for VMware vCenter Server’s virtual infrastructure, arises from insufficient input data validation. This allows an attacker to read arbitrary files within the system.

The vulnerability of the ESX Agent Manager EAM extension, a management tool for VMware vCenter Server’s virtual infrastructure, is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to read arbitrary files in the system by sending GET requests to po...