Oracle ATS DownloadServlet exportFileName Directory Traversal (CVE-2016-0486)

A directory traversal vulnerability exists in Oracle's Application Testing Suite. The vulnerability is due to insufficient input validation while processing HTTP requests to the "/otm/download" URI with parameter exportFileName. A remote unauthenticated attacker can exploit this vulnerability by...

PT-2016-4246

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite affected versions not specified Description The issue is related to a Directory Traversal and Information Disclosure vulnerability in the DownloadServlet exportFileName Parameter of the Oracle Application Testi...

Liferay Portal < 5.2.3 'exportFileName' File Creation Remote Code Execution

Binary data 5859.prm...