Arbitrary File Read Vulnerability in UFIDA NC at UFIDA Network Technology Co.

UFIDA NC is a large erp enterprise management system and e-commerce platform. UFIDA NC suffers from an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

WordPress plugin Product Input Fields for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

Sitecore 8.x < 10.4 Arbitrary File Read

Sitecore CMS version 8.x 10.4 are affected by an incorrect path access check vulnerability allowing unauthenticated remote attackers to read arbitrary files on the affected host. No source data...

WordPress Product Input Fields for WooCommerce plugin <= 1.9 - Authenticated (Contributor+) Arbitrary File Read vulnerability

Authenticated Contributor+ Arbitrary File Read vulnerability discovered by 1337Wannabe in WordPress Plugin Product Input Fields for WooCommerce versions = 1.9...

WordPress MP3 Sticky Player plugin <= 8.0 - Unauthenticated Arbitrary File Read/Download vulnerability

Unauthenticated Arbitrary File Read/Download vulnerability discovered by Tonn in WordPress Plugin MP3 Sticky Player versions = 8.0...

CVE-2024-10803

CVE-2024-10803 – MP3 Sticky Player (WordPress) vulnerability : All versions up to and including 8.0 are vulnerable to Directory Traversal via content/downloader.php, allowing unauthenticated attackers to read arbitrary server files. This matches the assessment from Patchstack/Wordfence indicating...

CVE-2024-10803 MP3 Sticky Player <= 8.0 - Unauthenticated Arbitrary File Read/Download

The MP3 Sticky Player plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.0 via the content/downloader.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...

CVE-2024-10803 MP3 Sticky Player <= 8.0 - Unauthenticated Arbitrary File Read/Download

The MP3 Sticky Player plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.0 via the content/downloader.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...

CVE-2024-52726

CRMEB v5.4.0 is vulnerable to Arbitrary file read in the savebasics function which allows an attacker to obtain sensitive information...

CVE-2024-52726

CRMEB v5.4.0 is vulnerable to Arbitrary file read in the savebasics function which allows an attacker to obtain sensitive information...

ZhongBangKeJi CRMEB 安全漏洞

ZhongBangKeJi CRMEB is an open source e-commerce management system from China ZhongBang Technology ZhongBangKeJi. A security vulnerability exists in ZhongBangKeJi CRMEB v5.4.0, which originates from an arbitrary file read vulnerability in the savebasics function. An attacker can exploit this...

CVE-2024-52726

CRMEB v5.4.0 is vulnerable to Arbitrary file read in the savebasics function which allows an attacker to obtain sensitive information...

CVE-2024-52726

CRMEB v5.4.0 is vulnerable to Arbitrary file read in the savebasics function which allows an attacker to obtain sensitive information...

PT-2024-35421 · Crmeb · Crmeb

Name of the Vulnerable Software and Affected Versions: CRMEB version 5.4.0 Description: The issue allows an attacker to obtain sensitive information through an arbitrary file read in the save basics function. Recommendations: For CRMEB version 5.4.0, consider restricting access to the save basics...

CVE-2024-52726

CRMEB v5.4.0 is vulnerable to an Arbitrary file read in the save_basics function, enabling an attacker to obtain sensitive information. The vulnerability is consistently described across varied sources (Red Hat, NVD, OSV, CIRCL, CNNVD, CVE lists) as a flaw in the save_basics routine, but concrete...

WordPress Jobify theme < 4.3.0 - Unauthenticated Arbitrary File Read vulnerability

Unauthenticated Arbitrary File Read vulnerability discovered by Ananda Dhakal Patchstack in WordPress Theme Jobify versions 4.3.0...

CVE-2021-1232

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on the underlying filesystem of an affected system. This vulnerability is due to insufficient access control for sensitive information that ...

CVE-2024-41972

A low privileged remote attacker can overwrite an arbitrary file on the filesystem which may lead to an arbitrary file read with root privileges...

Arbitrary File Read

Gradio is vulnerable to Arbitrary File Read. The vulnerability is due to improper handling of File or UploadButton components, allowing attackers to read arbitrary files from the application server...

CVE-2024-11310 TRCore DVC - Arbitrary File Read through Path Traversal

The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files...