CVE-2026-117566

EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in app/down.php, app/thumb.php and app/info.php that allows reading files outside the upload directory. Attackers can supply ../ sequences in the dw, history or img parameters to read files with allowed upload...

CVE-2026-117566

EasyImages versions 2.0 through 2.8.6 are vulnerable to an unauthenticated path traversal vulnerability in the app/down.php , app/thumb.php , and app/info.php components. The root cause is the improper limitation of pathnames, where attackers can supply ../ sequences in the dw , history , or img ...

CVE-2026-117566 EasyImages2.0 through 2.8.6 Unauthenticated Path Traversal via down.php, thumb.php and info.php

EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in app/down.php, app/thumb.php and app/info.php that allows reading files outside the upload directory. Attackers can supply ../ sequences in the dw, history or img parameters to read files with allowed upload...

EUVD-2026-110844

EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in app/down.php, app/thumb.php and app/info.php that allows reading files outside the upload directory. Attackers can supply ../ sequences in the dw, history or img parameters to read files with allowed upload...

PT-2026-126425

EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in app/down.php, app/thumb.php and app/info.php that allows reading files outside the upload directory. Attackers can supply ../ sequences in the dw, history or img parameters to read files with allowed upload...

Synway SMG Gateway down.php - Arbitrary File Read Detection

There is an arbitrary file reading vulnerability in the down.php file of Synway SMG gateway management software, through which an attacker can download any file from the server. !/usr/bin/env python3 -- coding: utf-8 -- """There is an arbitrary file reading vulnerability in the down.""" import re...

EasyImage down.php - Arbitrary File Read Detection

down.php file in EasyImage is vulnerable to arbitrary file read. !/usr/bin/env python3 -- coding: utf-8 -- """down.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'EasyImage down.php - Arbitrary File Read Detection',...

CVE-2022-48161: Files or Directories Accessible to External Parties

Easy Images v2.0 was discovered to contain an arbitrary file download vulnerability via the component /application/down.php. This vulnerability is exploited via a crafted GET request...

CVE-2022-48161

CVE-2022-48161 affects Easy Images v2.0. An arbitrary file download vulnerability exists in the component /application/down.php, exploitable via a crafted GET request. The issue is mapped with CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (base score 7.5, HIGH; network vector, no privileges, no ...

CVE-2018-14972

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/down.php has XSS...

CVE-2018-14972

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/down.php has XSS...

CVE-2018-14972

CVE-2018-14972 affects QCMS 3.0.1, with a cross-site scripting vulnerability in upload/System/Controller/backend/down.php. The issue is described across multiple records (NVD/CNVD/CVE entries) as an XSS in that file path; no specific exploit details, affected versions, or remediation are provided...

CVE-2018-14972: Improper Neutralization of Input During Web Page Generation

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/down.php has XSS...

PT-2018-12849

Name of the Vulnerable Software and Affected Versions QCMS version 3.0.1 Description An issue was discovered in the upload/System/Controller/backend/down.php file, which has a Cross-Site Scripting XSS issue. Recommendations For QCMS version 3.0.1, consider restricting access to the vulnerable...

Earcms down.php suffers from arbitrary file download vulnerability

Ear Music Ear Music is an interface using Discuz backend style and UCHome user center style combined with the core by the high-speed template engine and caching mechanism and other frameworks coexist PHP open source music system. Earcms down.php arbitrary file download vulnerability. Allow...

CVE-2009-4978: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in down.php in MyBackup 1.4.0 allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

Sky(skycn)procedure SQL injection vulnerability-vulnerability warning-the black bar safety net

Sky Download Station is domestic famous of download sites that offer at home and abroad the latest freeware, shareware download. Its in the country railcom, Unicom, Telecommunications, Information port, etc. are built with php+MySql set up the Download Station, a considerable part of the download...

CVE-2008-4435: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the RMSOFT Downloads Plus rmdp module 1.5 and 1.7 for Xoops allow remote attackers to inject arbitrary web script or HTML via the 1 key parameter to search.php and the 2 id parameter to down.php...

RMSOFT Downloads Plus - (rmdp) 1.51.7 Module for XOOPS down.php?id Cross-Site Scripting

RMSOFT Downloads Plus - rmdp 1.51.7 Module for XOOPS down.php?id Cross-Site Scripting source: https://www.securityfocus.com/bid/30620/info RMSOFT Downloads Plus is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...

CVE-2007-1392: Undefined Security Weakness

Directory traversal vulnerability in down.php in netForo! 0.1g allows remote attackers to read arbitrary files via a .. dot dot in the filetodownload parameter...