dotCMS Arbitrary File Upload (CVE-2022-26352; CVE-2018-5445)

An arbitrary file upload vulnerability exists in dotCMS. Successful exploitation of this vulnerability allows an attacker to execute arbitrary code on the vulnerable system with administrative privileges...

CVE-2018-5445

A Path Traversal issue was discovered in Advantech WebAccess/SCADA versions prior to V8.220170817. An attacker has read access to files within the directory structure of the target device...

CVE-2018-5445

A Path Traversal issue was discovered in Advantech WebAccess/SCADA versions prior to V8.220170817. An attacker has read access to files within the directory structure of the target device...

CVE-2018-5445

CVE-2018-5445 maps to a directory traversal in Advantech WebAccess/SCADA prior to V8.2_20170817. The flaw allows an attacker to read files within the device’s directory structure (CWE-22). Affected product: Advantech WebAccess/SCADA; vulnerable component/file access path handling leading to unaut...

Advantech WebAccess/SCADA

CVSS v3 5.3 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Advantech Equipment: WebAccess/SCADA Vulnerabilities: Path Traversal, SQL Injection AFFECTED PRODUCTS The following versions of WebAccess/SCADA, a SCADA software platform, are affected: WebAccess/SCADA versions prior ...