CVE-2026-2683: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was found in Tsinghua Unigroup Electronic Archives System 3.2.21080262532. The affected element is an unknown function of the file /Using/Subject/downLoad.html. Performing a manipulation of the argument path results in path traversal. The attack may be initiated remotely. The...

CVE-2025-0227: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability, which was classified as problematic, was found in Tsinghua Unigroup Electronic Archives System 3.2.21080262532. This affects an unknown part of the file /Logs/Annals/downLoad.html. The manipulation of the argument path leads to information disclosure. It is possible to initiate t...

CVE-2025-0226: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability, which was classified as problematic, has been found in Tsinghua Unigroup Electronic Archives System 3.2.21080262532. Affected by this issue is the function download of the file /collect/PortV4/downLoad.html. The manipulation of the argument path leads to information disclosure. T...

PT-2025-3797

Name of the Vulnerable Software and Affected Versions Tsinghua Unigroup Electronic Archives System version 3.2.21080262532 Description A vulnerability was found in the Tsinghua Unigroup Electronic Archives System, affecting an unknown part of the file /Logs/Annals/downLoad.html. The manipulation ...

CVE-2024-13042: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in Tsinghua Unigroup Electronic Archives Management System 3.2.21080262532. It has been classified as problematic. Affected is the function download of the file /Searchnew/Subject/download.html. The manipulation of the argument path leads to information disclosure. It is...

CVE-2024-48813: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in employee-management-system-php-and-mysql-free-download.html taskmatic 1.0 allows a remote attacker to execute arbitrary code via the adminid parameter of the /update-employee.php component...

CVE-2018-11413

An issue was discovered in BearAdmin 0.5. Remote attackers can download arbitrary files via /admin/databack/download.html?name= directory traversal sequences, as demonstrated by name=../application/database.php to read the MySQL credentials in the configuration...

CVE-2018-11413: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in BearAdmin 0.5. Remote attackers can download arbitrary files via /admin/databack/download.html?name= directory traversal sequences, as demonstrated by name=../application/database.php to read the MySQL credentials in the configuration...

PT-2018-10556

Name of the Vulnerable Software and Affected Versions BearAdmin version 0.5 Description An issue allows remote attackers to download arbitrary files via directory traversal sequences in the /admin/databack/download.html endpoint, potentially exposing sensitive information such as MySQL credential...

VideoSpirit Pro 1.90 - (SEH) Buffer Overflow

No description provided by source. !/usr/bin/ruby Vendor: http://www.verytools.com/ Software link: http://www.verytools.com/videospirit/download.html print ''' VideoSpirit Pro Seh Buffer Overflow Version: Pro 1.90 Date found: 11.11.2013 Exploit Author: metacom Tested on: Win7-Win8-WinXp-Sp3-EN ''...

Avast! Antivirus File Opening Insecure Library Loading Vulnerability (Windows)

This host is installed with avast! AntiVirus and is prone to insecure library loading vulnerability. OpenVAS Vulnerability Test $Id: secpodavastavinsecurelibloadvulwin.nasl 5394 2017-02-22 09:22:42Z teissa $ Avast! Antivirus File Opening Insecure Library Loading Vulnerability Windows Authors: Ant...

CVE-2008-1730: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in download.html in ARWScripts Gallery Script Lite aka gallery-script-lite or Free Photo Gallery Site Script, as of 20080411, allows remote attackers to read arbitrary local files via directory traversal sequences in the path parameter...