EUVD-2017-7800

Malware in sbrugna...

Metasoft MetaCRM 代码问题漏洞

Metasoft MetaCRM is a customer relationship management system software from China Metasoft Metasoft. A code issue vulnerability exists in Metasoft MetaCRM 6.4.2 and earlier versions, which stems from the improper handling of the parameter p in the AnalyzeParam function in the file download.jsp,...

CVE-2025-7876: Deserialization of Untrusted Data

A vulnerability classified as critical was found in Metasoft 美特软件 MetaCRM up to 6.4.2. This vulnerability affects the function AnalyzeParam of the file download.jsp. The manipulation of the argument p leads to deserialization. The attack can be initiated remotely. The exploit has been disclosed t...

CVE-2019-9632

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request...

PT-2022-9921

Name of the Vulnerable Software and Affected Versions NorthStar Club Management version 6.3 Description The issue allows remote unauthenticated users to download arbitrary files, including JSP source code, across the filesystem of the host of the web application due to directory traversal in the...

CVE-2021-29395: Improper Limitation of a Pathname to a Restricted Directory

Directory travesal in /northstar/filemanager/download.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to download arbitrary files, including JSP source code, across the filesystem of the host of the web application...

Advantech WebAccess/NMS download.jsp Directory Traversal Information Disclosure and Denial-of-Service Vulnerability

This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations of Advantech WebAccess/NMS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the download.jsp...

PT-2020-12258

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/NMS versions prior to 3.0.2 Description An attacker could use a specially crafted URL to delete or read files outside the WebAccess/NMS's control. This issue allows for directory traversal, potentially leading to informatio...

CVE-2019-9632

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request...

CVE-2019-9632

CVE-2019-9632 affects ESAFENET CDG V3 and V5. The vulnerability enables arbitrary file download via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request. Reported impact is information disclosure; CVSSv3 base score 7.5 (HI...

PT-2019-19766

Name of the Vulnerable Software and Affected Versions ESAFENET CDG versions V3 and V5 Description The issue concerns an arbitrary file download vulnerability. It can be exploited via the fileName parameter in the "download.jsp" endpoint, specifically when the InstallationPack parameter is...

CVE-2019-9632: Undefined Security Weakness

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request...

CVE-2017-16609

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within download.jsp. The issue results from the lack of proper validation ...

CVE-2017-16609

Summary: CVE-2017-16609 affects NetGain Enterprise Manager. The flaw is in the download.jsp path where a user-supplied string is not properly validated before using it to download a file. This allows remote, unauthenticated attackers to disclose sensitive information from vulnerable installations...

CVE-2017-16609: Path Traversal: 'C:dirname'

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within download.jsp. The issue results from the lack of proper validation ...

NetGain Enterprise Manager Arbitrary File Download Vulnerability

Netgain Enterprise Manager is a suite of IT asset monitoring and management software from NetGain Systems, Singapore. An arbitrary file download vulnerability exists in the download.jsp file in Netgain Enterprise Manager, which occurs when the program fails to properly detect a user-submitted...

PT-2017-14493

Name of the Vulnerable Software and Affected Versions Netgain Enterprise Manager affected versions not specified Description This issue allows remote attackers to disclose sensitive information on vulnerable installations. Authentication is not required to exploit this issue. The specific flaw...

Korean GHBoard FlashUpload Component download.jsp name Parameter Arbitrary File Access

No description provided by source. source: http://www.securityfocus.com/bid/26182/info GHBoard is prone to multiple vulnerabilities that let attackers upload and download arbitrary files and execute arbitrary code within the context of the webserver process...

From download. jsp to the root-vulnerability warning-the black bar safety net

The pain of belief According to this structure:'//union//select//1,'admin','admin',1,1,1-password any %@ page import="java. util., java. io."%& gt; % % %-- abysssec inc public material just upload this file with abysssec. jsp and execute your command your command will run as administrator . you c...

CVE-2007-5739: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in component/flashupload/download.jsp in the FlashUpload component in Korean GHBoard allows remote attackers to read arbitrary files via a .. dot dot in the name parameter...