Directory traversal

An access control issue in Revenue Collection System v1.0 allows unauthenticated attackers to view the contents of /admin/DBbackup/ directory...

CVE-2022-46967: Insufficiently Protected Credentials

An access control issue in Revenue Collection System v1.0 allows unauthenticated attackers to view the contents of /admin/DBbackup/ directory...

PT-2023-15122

Name of the Vulnerable Software and Affected Versions Revenue Collection System version 1.0 Description The issue allows unauthenticated attackers to view the contents of the "/admin/DBbackup/" directory. This is due to an access control problem. Recommendations For Revenue Collection System...

Advantech WebAccess/NMS DBBackupResource Unrestricted File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess/NMS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the DBBackup endpoint. The issue results from the lac...

PT-2014-5011

Name of the Vulnerable Software and Affected Versions XCloner Standalone versions 3.5 and earlier Description The issue allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the dbbackup comp parameter in a generate action to "index2.php". It is...