571 matches found
ZTE enterprise gateway system modules/system/download.php arbitrary File Download vulnerability
No description provided by source...
ZTE gateway device /modules/service/download.php the file id parameter local file include vulnerability
No description provided by source...
Webnet CMS download.php parameters filename arbitrary File Download vulnerability
No description provided by source...
XuezhuLi FileSharing - Directory Traversal
XuezhuLi FileSharing - Directory Traversal Exploit Title: XuezhuLi FileSharing - Path Traversal Vulnerability Date: 2016-06-23 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: https://github.com/XuezhuLi Software Link:...
XuezhuLi FileSharing - Directory Traversal
Exploit Title: XuezhuLi FileSharing - Path Traversal Vulnerability Date: 2016-06-23 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: https://github.com/XuezhuLi Software Link: https://github.com/XuezhuLi/FileSharing/archive/master.zip Version: Latest commit Tested on:...
XuezhuLi FileSharing Path Traversal
Exploit Title: XuezhuLi FileSharing - Path Traversal Vulnerability Date: 2016-06-23 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: https://github.com/XuezhuLi Software Link: https://github.com/XuezhuLi/FileSharing/archive/master.zip Version: Latest commit Tested on:...
Arbitrary File Traversal Vulnerability in Reporter System of Shanghai Bingfeng Computer Network Technology Co.
Shanghai Bingfeng Computer Network Technology Co., Ltd. is a domestic VPN, Traffic Management, Behavior Management, Link Load Balancing, Next Generation Firewall equipment supplier and IT value solution provider. Bingfeng network reporter system is a set of data report management system. Shanghai...
lsgalilei.org XSS vulnerability
Vulnerable URL: https://www.lsgalilei.org/elearning/claroline/backends/download.php?url=aHR0cDovL2cuZTxzdmcgb25sb2FkPWFsZXJ0KCJYU1NQT1NFRCIpPg===true=INGDIP Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicl...
Wordpress RedSteel Theme-download.php任意文件下载漏洞
No description provided by source...
Reflected Cross-Site Scripting Vulnerability in MetInfo Version 5.3.3
MetInfo is an enterprise website management system with PHP Mysql architecture. A reflective cross-site scripting vulnerability exists in MetInfo version 5.3.3. An attacker can exploit the vulnerability to conduct cross-site scripting attacks. The vulnerability exists in the following pages:...
Joomla 插件fsave v2.0 download.php 任意文件下载漏洞
No description provided by source...
Joomla Fsave 2.0 Local File Disclosure
. | | / | | \ \ | | \ / | |\ / / /\ \ / \ | Y / ^ / / || / / / / /\ /\ \ \ \ | / \ / / \ | \ \ / // / \ / / / / Joomla = fsave Plugin Local File Disclosure Vulnerability My + Author : KnocKout Contact : [email protected] Skype : [email protected] HomePage : http://milw00rm.com -...
Netentsec ASG网康应用安全网关在commonpluginDownload.php存在任意文件下载漏洞
0x01漏洞简介 Netentsec ASG网康应用安全网关在/commonplugin/Download.php存在任意文件下载漏洞。远程攻击者可以利用参数licensefile 或者 reqfile 结合..下载任意文件。如果下载文件是SvrLicense.license表示该漏洞已经修复，如果下载文件为自己包含的文件，说明该漏洞仍然存在。 0x02漏洞分析 查看问题代码如下： obstart""; header"Expires: Sat, 01 Jan 2000 00:00:00 GMT"; header"Last-Modified: ".gmdate"D, d M Y...
CVE-2015-5471: Improper Limitation of a Pathname to a Restricted Directory
Absolute path traversal vulnerability in include/user/download.php in the Swim Team plugin 1.44.10777 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file parameter...
CVE-2015-4694: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in download.php in the Zip Attachments plugin before 1.5.1 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the zafile parameter...
moteko.net XSS vulnerability
Vulnerable URL: http://www.moteko.net/portal/download.php?client=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculat...
LineNity WP Premium Theme Local File Inclusion Vulnerability
LineNity WP premium theme suffers from a local file inclusion vulnerability. Document Title: =============== LineNity WP Premium Theme - File Include Vulnerability Product & Service Introduction: =============================== Linenity wordpress theme is a that features a clean and flexible desi...
rmdown.com XSS vulnerability
Open Bug Bounty ID: OBB-94419 Description| Value ---|--- Affected Website:| rmdown.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...