CVE-2023-23333

SolarView Compact 6.00 is affected by an OS command injection via downloader.php, allowing remote code execution. The vulnerability arises from an insecure file parameter in downloader.php that can bypass internal restrictions. Public exploit templates (including Metasploit module) describe obtai...

CVE-2023-23333: Improper Neutralization of Special Elements used in a Command

There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php...

CVE-2023-23333

There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php...

PT-2022-13669 · WordPress · Simple File List

Name of the Vulnerable Software and Affected Versions: Simple File List WordPress plugin versions up to and including 3.2.7 Description: The issue allows unauthenticated attackers to download arbitrary files due to missing controls in the eeFile parameter found in the /includes/ee-downloader.php...

CVE-2022-1119: Improper Limitation of a Pathname to a Restricted Directory

The Simple File List WordPress plugin is vulnerable to Arbitrary File Download via the eeFile parameter found in the /includes/ee-downloader.php file due to missing controls which makes it possible unauthenticated attackers to supply a path to a file that will subsequently be downloaded, in...

Directory traversal

The s3bubble-amazon-s3-html-5-video-with-adverts plugin 0.7 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path parameter...

PT-2019-7422

Name of the Vulnerable Software and Affected Versions s3bubble-amazon-s3-audio-streaming plugin version 2.0 Description The issue concerns directory traversal via the path parameter in the /adverts/assets/plugins/ultimate/content/downloader.php API endpoint. This allows for potential unauthorized...

PT-2019-7423

Name of the Vulnerable Software and Affected Versions s3bubble-amazon-s3-html-5-video-with-adverts plugin version 0.7 Description The issue concerns directory traversal via the path parameter in the "adverts/assets/plugins/ultimate/content/downloader.php" API endpoint. This allows unauthorized...

CVE-2015-9463: Improper Limitation of a Pathname to a Restricted Directory

The s3bubble-amazon-s3-audio-streaming plugin 2.0 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path parameter...

CVE-2015-9464: Improper Limitation of a Pathname to a Restricted Directory

The s3bubble-amazon-s3-html-5-video-with-adverts plugin 0.7 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path parameter...

PT-2017-3601

Name of the Vulnerable Software and Affected Versions: ClipBucket versions prior to 4.0.0 Release 4902 Description: The issue is related to the lack of proper neutralization of special elements used in OS commands. This allows an attacker to inject any OS commands via shell metacharacters in the...