571 matches found
PT-2017-6871
Name of the Vulnerable Software and Affected Versions Image Export plugin version 1.1 for WordPress Description The issue allows remote attackers to read and delete arbitrary files by providing a full pathname in the file parameter to the "download.php" endpoint. Recommendations For Image Export...
CVE-2015-5609: Improper Limitation of a Pathname to a Restricted Directory
Absolute path traversal vulnerability in the Image Export plugin 1.1 for WordPress allows remote attackers to read and delete arbitrary files via a full pathname in the file parameter to download.php...
CVE-2015-5469: Improper Limitation of a Pathname to a Restricted Directory
Absolute path traversal vulnerability in the MDC YouTube Downloader plugin 2.1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file parameter to includes/download.php...
Synology Photo Station Directory Traversal Vulnerability (CNVD-2017-06921)
Synology Photo Station is a solution for sharing pictures, videos and blogs over the Internet from Synology, a Chinese company. A directory traversal vulnerability exists in the download.php file in Synology Photo Station versions prior to 6.5.3-3226. A remote attacker can exploit the vulnerabili...
CVE-2016-10331
Directory traversal vulnerability in download.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to read arbitrary files via a full pathname in the id parameter...
CVE-2016-10331: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in download.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to read arbitrary files via a full pathname in the id parameter...
GeoMoose <=2.9.2 /php/download.php parameter ext arbitrary file read vulnerability
No description provided by source...
Trend Micro Control Manager download.php Information Disclosure
An information disclosure vulnerability exists in Trend Micro Control Manager. The vulnerability is due to security misconfiguration which allows access to the unreferenced download.php file, which in turn allow reading of the arbitrary files...
skymetweather.com XSS vulnerability
Vulnerable URL: http://www.skymetweather.com/download.php?filename=prompt/OPENBUGBOUNTY/...
phpatm.org XSS vulnerability
Vulnerable URL: http://phpatm.org/download.php?direction="order=nom=test Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5712013 VIP website status:| No Check phpatm.org SSL...
megafiletube.unblocked.onl XSS vulnerability
Vulnerable URL: https://megafiletube.unblocked.onl/download.php?id=19384"--!" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...
Collabo - Arbitrary File Download Vulnerability
Exploit for php platform in category web applications Exploit Title: Collabo - TeamBusiness Collaboration Network - Arbitrary File Download Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://321-internet.com/ Software Buy:...
FTP Made Easy PRO 1.2 - Arbitrary File Download Vulnerability
Exploit for php platform in category web applications Exploit Title: FTP Made Easy PRO Script v1.2 - Arbitrary File Download Google Dork: N/A Date: 07.02.2017 Vendor Homepage: http://nelliwinne.net/ Software Buy:...
Schoolhos CMS 'download.php' SQL Injection Vulnerability
Schoolhos CMS is a free and open source content management system. A SQL injection vulnerability exists in download.php in Schoolhos CMS version 2.29, which can be exploited by an attacker to compromise the application, access or modify data, or exploit a potential vulnerability in the underlying...
Schoolhos CMS 2.29 - Remote Code Execution / SQL Injection
\x0d\x0a-----------------------------26518470919255\x0d\x0a\x0d\x0a' \ 'http://HOST/PATH/elearningku/proses.php?pilih=guru&untukdi=upload' php file can be ccessed via : http://HOST/PATH/file/mater...
Arbitrary File Download Vulnerability in Mixcall Attendant Management System File Parameter
Mixcall seat management system is based on B/S architecture, the management personnel can directly log into the Mixcall seat management center through the computer, and view the detailed situation related to the seat personnel's voice services. An arbitrary file download vulnerability exists in t...
seaplane.aero XSS vulnerability
Vulnerable URL: http://www.seaplane.aero/images/pdf/download.php?name=FlyerMBLFBodeneffektfahrzeugINAvia.pdf" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 23283531 VIP website...
DVFolderContent Module 'download.php' local file inclusion vulnerability in Joomla!
Joomla! is an open source content management system CMS. A local file inclusion vulnerability exists in the Joomla! DVFolderContent Module 'download.php' due to a failure to adequately clean user input data. An attacker could exploit this vulnerability to obtain sensitive information or execute...