Artica Pandora FMS 跨站脚本漏洞

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A security vulnerability exists in Artica Pandora FMS v7.0NG.761 and earlier versions, which stems from the dirname...

CVE-2022-2032: Improper Neutralization of Input During Web Page Generation

In Pandora FMS v7.0NG.761 and below, in the file manager section, the dirname parameter is vulnerable to a Stored Cross Site-Scripting. This vulnerability can be exploited by an attacker with administrator privileges logged in the system...

UBUNTU-CVE-2018-7158

The 'path' module in the Node.js 4.x release line contains a potential regular expression denial of service ReDoS vector. The code in question was replaced in Node.js 6.x and later so this vulnerability only impacts all versions of Node.js 4.x. The regular expression, splitPathRe, used within the...

ALPINE-CVE-2018-7158

The 'path' module in the Node.js 4.x release line contains a potential regular expression denial of service ReDoS vector. The code in question was replaced in Node.js 6.x and later so this vulnerability only impacts all versions of Node.js 4.x. The regular expression, splitPathRe, used within the...

CVE-2017-13697

controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the dirname variable...

CVE-2017-13697

controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the dirname variable...

PT-2017-13025

Name of the Vulnerable Software and Affected Versions FineCms version 5.0.11 Description The issue is related to XSS and concerns the dirname variable in the controllers/member/api.php file. Recommendations For FineCms version 5.0.11, consider restricting the use of the dirname variable in the...

CVE-2017-13697: Improper Neutralization of Input During Web Page Generation

controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the dirname variable...

CVE-2015-0785: Exposure of Sensitive Information to an Unauthorized Actor

com.novell.zenworks.inventory.rtr.actionclasses.wcreports in Novell ZENworks Configuration Management ZCM allows remote attackers to read arbitrary folders via the dirname variable...

GNU Bash code execution vulnerability in path completion(CVE-2017-5932)

1 Introduction GNU Bash from version 4.4 contains two bugs in its path completion feature leading to a code execution vulnerability. An exploit can be realized by creating a file or directory with a specially crafted name. A user utilizing GNU Bash's built-in path completion by hitting the Tab...

WS-2016-7091

In php-src, PHP-5.4.1-RC1 to php-7.0.8, the “psfilescleanupdir“ function is vulnerable against a Buffer overflow vulnerability via the “dirname” variable. This issue may be used to crash the program, and allow Remote code execution...

Novell ZENworks 'dirname' Information Disclosure Vulnerability

Novell ZENworks is a suite of software that supports automated IT management and business process management across resources within an organization. An information disclosure vulnerability exists in Novell ZENworks 'dirname'. Due to the program eventory.rtr.actionclasses.wcreports failing to...

PT-2015-4880

Name of the Vulnerable Software and Affected Versions Novell ZENworks Configuration Management ZCM affected versions not specified Description The issue allows remote attackers to read arbitrary folders via the dirname variable. This is related to the...

Coppermine Photo Gallery 1.4.10 - SQL Injection

Coppermine Photo Gallery 1.4.10 - SQL Injection table prefix\n"; print " - hostname\n"; print " - web dirname \n"; print " - force mode - '0' - for Off or "album number" for force mode On \n"; print " table prefix - prefix of sql tables\n"; print " example: " . $argv0 . " coppermine.site photo/ 1...