Lucene search
+L

8 matches found

NVD
NVD
•added 2026/06/15 2:16 p.m.•32 views

CVE-2018-25437

WordPress CherryFramework Themes 3.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to download sensitive backup files by accessing the downloadbackup.php endpoint. Attackers can directly access the downloadbackup.php script in the admin/datamanagement...

8.7CVSS0.00287EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/06/15 12:00 p.m.•53 views

CVE-2018-25437 WordPress CherryFramework Themes 3.1.4 Backup File Download

WordPress CherryFramework Themes 3.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to download sensitive backup files by accessing the downloadbackup.php endpoint. Attackers can directly access the downloadbackup.php script in the admin/datamanagement...

8.7CVSS0.00287EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/15 12:00 a.m.•0 views

CVE-2018-25437: Missing Authentication for Critical Function

WordPress CherryFramework Themes 3.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to download sensitive backup files by accessing the downloadbackup.php endpoint. Attackers can directly access the downloadbackup.php script in the admin/datamanagement...

8.7CVSS5.8AI score0.00287EPSS
SaveExploits0References2
NVD
NVD
•added 2024/02/15 8:15 p.m.•23 views

CVE-2024-25502

Directory Traversal vulnerability in flusity CMS v.2.4 allows a remote attacker to execute arbitrary code and obtain sensitive information via the downloadbackup.php component...

9.8CVSS7.2AI score0.01417EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/02/15 12:00 a.m.•15 views

CVE-2024-25502

Directory Traversal vulnerability in flusity CMS v.2.4 allows a remote attacker to execute arbitrary code and obtain sensitive information via the downloadbackup.php component...

7.6AI score0.01417EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/02/15 12:00 a.m.•31 views

CVE-2024-25502

Directory Traversal vulnerability in flusity CMS v.2.4 allows a remote attacker to execute arbitrary code and obtain sensitive information via the downloadbackup.php component...

7.4AI score0.01417EPSS
SaveExploits1References1
CVE
CVE
•added 2024/02/15 12:00 a.m.•94 views

CVE-2024-25502

A Directory Traversal vulnerability exists in flusity CMS v.2.4 within the download_backup.php component. This flaw allows a remote attacker to access files and directories not intended for public access, potentially leading to the execution of arbitrary code and the theft of sensitive informatio...

9.8CVSS7.4AI score0.01417EPSS
SaveExploits1References1Affected Software1
exploitpack
exploitpack
•added 2006/07/18 12:00 a.m.•21 views

Eskolar CMS 0.9.0.0 - Blind SQL Injection

Eskolar CMS 0.9.0.0 - Blind SQL Injection ================================================================================================== !/usr/bin/perl use IO::Socket; ==================================================================================================...

0.6AI score
SaveExploits0
Rows per page
Query Builder