skymetweather.com XSS vulnerability

Vulnerable URL: http://www.skymetweather.com/download.php?filename=prompt/OPENBUGBOUNTY/...

CVE-2017-1002004

Vulnerability in wordpress plugin DTracker v1.5, In file ./dtracker/download.php user input isn't sanitized via the id variable before adding it to the end of an SQL query...

CVE-2017-1002016: Unrestricted Upload of File with Dangerous Type

Vulnerability in wordpress plugin flickr-picture-backup v0.7, The code in flickr-picture-download.php doesn't check to see if the user is authenticated or that they have permission to upload files...

CVE-2017-1002008: Unrestricted Upload of File with Dangerous Type

Vulnerability in wordpress plugin membership-simplified-for-oap-members-only v1.58, The file download code located membership-simplified-for-oap-members-only/download.php does not check whether a user is logged in and has download privileges...

CVE-2017-1002004: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in wordpress plugin DTracker v1.5, In file ./dtracker/download.php user input isn't sanitized via the id variable before adding it to the end of an SQL query...

PT-2017-10993

Name of the Vulnerable Software and Affected Versions DTracker version 1.5 Description The issue concerns a lack of input sanitization in the DTracker plugin for WordPress. Specifically, in the file ./dtracker/download.php, user input via the id variable is not properly sanitized before being add...

PT-2017-10997

Name of the Vulnerable Software and Affected Versions membership-simplified-for-oap-members-only version 1.58 Description The issue concerns a lack of proper access control in the file download functionality. Specifically, the download.php file in the membership-simplified-for-oap-members-only...

PT-2017-11005

Name of the Vulnerable Software and Affected Versions Flickr Picture Backup version 0.7 Description The issue concerns a lack of authentication and permission checks in the flickr-picture-download.php code, allowing unauthorized file uploads. Recommendations For version 0.7, consider disabling th...

PT-2017-7554

Name of the Vulnerable Software and Affected Versions AlegroCart version 1.2.8 Description The issue allows remote administrators to execute arbitrary SQL commands via the download parameter in the check download and possibly check filename function in upload/admin2/model/products/model admin...

CVE-2017-13780

The EyesOfNetwork web interface aka eonweb 5.1-0 allows directory traversal attacks for reading arbitrary files via the module/adminconf/download.php file parameter...

CVE-2017-13780

The EyesOfNetwork web interface aka eonweb 5.1-0 allows directory traversal attacks for reading arbitrary files via the module/adminconf/download.php file parameter...

CVE-2017-13780: Improper Limitation of a Pathname to a Restricted Directory

The EyesOfNetwork web interface aka eonweb 5.1-0 allows directory traversal attacks for reading arbitrary files via the module/adminconf/download.php file parameter...

PT-2017-13096

Name of the Vulnerable Software and Affected Versions EyesOfNetwork web interface aka eonweb versions 5.1-0 Description The issue allows directory traversal attacks, enabling the reading of arbitrary files. This is achieved via the file parameter in the module/admin conf/download.php API endpoint...

CVE-2015-7517: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Double Opt-In for Download plugin before 2.0.9 for WordPress allow remote attackers to execute arbitrary SQL commands via the ver parameter to 1 class-doifd-download.php or 2 class-doifd-landing-page.php in public/includes/...

PT-2017-7210

Name of the Vulnerable Software and Affected Versions Double Opt-In for Download plugin versions prior to 2.0.9 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the ver parameter to specific API endpoints, including class-doifd-download.php and...

Dzzoffice v1.3.1 Arbitrary File Download Vulnerability in Multiple Pages

DzzOffice is an open source cloud storage management tool. Dzzoffice v1.3.1 Arbitrary file download vulnerability exists in the 'pdfviewer.php', 'view.php', 'download.php' and 'attachment.php' pages, which can be exploited by attackers to obtain sensitive information...

PT-2017-6810

Name of the Vulnerable Software and Affected Versions MantisBT versions 1.2.19 and earlier Description The issue allows remote authenticated users to download attachments linked to arbitrary private projects. This is possible when the threshold to access files is set to ANYBODY. The file id...

CVE-2015-5609: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in the Image Export plugin 1.1 for WordPress allows remote attackers to read and delete arbitrary files via a full pathname in the file parameter to download.php...

CVE-2015-5469: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in the MDC YouTube Downloader plugin 2.1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file parameter to includes/download.php...

CVE-2015-5468: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the WP e-Commerce Shop Styling plugin before 2.6 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter to includes/download.php...