PT-2019-19919

Name of the Vulnerable Software and Affected Versions BroadLearning eClass versions prior to 2.5.10.2.1 Description The issue allows arbitrary files to be downloaded without a login, specifically affecting URLs with "download attachment.php" under templates or home folders. Recommendations For...

PT-2018-10328

Name of the Vulnerable Software and Affected Versions Quest KACE System Management Appliance version 8.0.318 Description The issue allows for the reading of arbitrary files with 'www' privileges via Directory Traversal in the '/common/download attachment.php' script. This can be achieved by abusi...