PT-2019-12310

Name of the Vulnerable Software and Affected Versions OpenKM versions 6.3.2 through 6.3.7 Description The issue allows an attacker to upload a malicious JSP file into the /okm:root directories and move that file to the home directory of the site. This is achieved by exploiting the Filesystem path...

PT-2015-5584

Name of the Vulnerable Software and Affected Versions eTouch SamePage Enterprise Edition version 4.4.0.0.239 Description A directory traversal issue exists, allowing remote authenticated users to read arbitrary files. This is achieved by using a .. dot dot in the filepath parameter of the...

CVE-2015-2071: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in cm/newui/blog/export.jsp in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows remote authenticated users to read arbitrary files via a .. dot dot in the filepath parameter...

大汉版通系统再次getshell（需登陆）

简要描述： 大汉版通系统可以再次getshell，外加一处任意文件下载 详细说明： 注：该系统为信息公开系统xxgk 另外这个漏洞同样比较有意思，不知道程序员的逻辑是什么.. 1 任意文件下载 /xxgk/m57/replace/export.jsp 代码为 可以看出filename和savename直接get提交，SO.. 2 getshell /xxgk/m57/replace/oprimportinfo.jsp 产生漏洞的代码为 % //... // 表单变量初始化 String strTpliID = ""; String strTplfnbillstatus =...