CVE-2022-25216

An absolute path traversal vulnerability allows a remote attacker to download any file on the Windows file system for which the user account running DVDFab 12 Player recently renamed PlayerFab has read-access, by means of an HTTP GET request to http://:32080/download/...

CVE-2022-25216

DVDFab 12 Player/PlayerFab is affected by a local file inclusion (absolute path traversal) via HTTP GET to /download/. The issue allows remote attackers to download any file on the Windows filesystem readable by the running user. Root cause: traversal of local paths in the download endpoint. Affe...

CVE-2022-25216: Improper Limitation of a Pathname to a Restricted Directory

An absolute path traversal vulnerability allows a remote attacker to download any file on the Windows file system for which the user account running DVDFab 12 Player recently renamed PlayerFab has read-access, by means of an HTTP GET request to http:// :32080/download/...

PT-2022-17155

Name of the Vulnerable Software and Affected Versions DVDFab 12 Player recently renamed PlayerFab versions not specified Description An absolute path traversal issue allows a remote attacker to download any file on the Windows file system for which the user account running the software has...