CVE-2025-35052: Use of Hard-coded Cryptographic Key

Newforma Info Exchange NIX uses a hard-coded key to encrypt certain query parameters. Some encrypted parameter values can specify paths to download files, potentially bypassing authentication and authorization, for example, the 'qs' parameter used in '/DownloadWeb/download.aspx'. This key is shar...

CVE-2023-27067

Directory Traversal vulnerability in Sitecore Experience Platform through 10.2 allows remote attackers to download arbitrary files via crafted command to download.aspx...

CVE-2023-27067

Directory Traversal vulnerability in Sitecore Experience Platform through 10.2 allows remote attackers to download arbitrary files via crafted command to download.aspx...

PT-2023-20929 · Sitecore · Sitecore Experience Platform

Name of the Vulnerable Software and Affected Versions: Sitecore Experience Platform versions prior to 10.2 Description: The issue allows remote attackers to download arbitrary files via a crafted command to the "download.aspx" endpoint. This is achieved by exploiting a Directory Traversal...

CVE-2023-27067

Directory Traversal vulnerability in Sitecore Experience Platform through 10.2 allows remote attackers to download arbitrary files via crafted command to download.aspx...

CVE-2023-27067: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in Sitecore Experience Platform through 10.2 allows remote attackers to download arbitrary files via crafted command to download.aspx...

CVE-2017-5966: Improper Limitation of a Pathname to a Restricted Directory

Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to read arbitrary files via an absolute path traversal attack on sitecore/shell/download.aspx with the file parameter...

PT-2015-7401

Name of the Vulnerable Software and Affected Versions SiteFactory CMS version 5.5.9 Description The issue allows remote attackers to read arbitrary files by providing a full pathname in the file parameter to the "assets/download.aspx" API endpoint. Recommendations For SiteFactory CMS version 5.5....

CVE-2015-6914: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in SiteFactory CMS 5.5.9 allows remote attackers to read arbitrary files via a full pathname in the file parameter to assets/download.aspx...

BlueLine Intelligent Collaboration Platform EIS File Containment Vulnerability

BlueLine Intelligent Collaboration Platform EIS is an oa system based on asp.net and SharePoint, which is widely used in various industries. An arbitrary file download vulnerability exists in EIS of BlueLine Intelligent Collaboration Platform. Because the Project/ProjectInfo/DownLoad.aspx page...

N-Central Remote Support Manager 14.2.7.171 File Read / Code Execution

, , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. N-central Remote Support Manager Multiple Vulnerabilities Affected Versions: Verified in Version 14.2.7.171 PDF:...

CVE-2011-1569: Exposure of Sensitive Information to an Unauthorized Actor

download.aspx in Douran Portal 3.9.7.8 allows remote attackers to obtain source code of arbitrary files under the web root via 1 a trailing ".", 2 a trailing space, or 3 mixed case in the FileNameAttach parameter...

Smart Douran CMS File Disclosure

Securitylab.ir Application Info: Name: Smart Douran CMS Vendor: http://smartdouran.ir Vulnerability Info: Type: Remote File Download Risk: Medium 2008-08-11 - Found Vulnerability 2010-05-19 - Public disclosure Vulnerability: http://site.com/Admin/ImportExport/Download.aspx?filename=../../web.conf...

Microsoft SharePoint Cross Site Scripting Vulnerability

This host is running Microsoft SharePoint Server and is prone to Cross Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gbmssharepointxssvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Microsoft SharePoint Cross Site Scripting Vulnerability Authors: Antu Sanadi Copyright: Copyright c 20...

CVE-2009-3830: Improper Input Validation

The download functionality in Team Services in Microsoft Office SharePoint Server 2007 12.0.0.4518 and 12.0.0.6219 allows remote attackers to read ASP.NET source code via pathnames in the SourceUrl and Source parameters to layouts/download.aspx...