CVE-2024-0716 Byzoro Smart S150 Management Platform Backup File download.php information disclosure

A vulnerability classified as problematic has been found in Byzoro Smart S150 Management Platform V31R02B15. This affects an unknown part of the file /log/download.php of the component Backup File Handler. The manipulation leads to information disclosure. It is possible to initiate the attack...

CVE-2024-0465

A vulnerability classified as problematic was found in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file download.php. The manipulation of the argument downloadfile leads to path traversal: '../filedir'. The exploit has been disclosed to the...

CVE-2023-7149

A vulnerability was found in code-projects QR Code Generator 1.0. It has been classified as problematic. This affects an unknown part of the file /download.php?file=author.png. The manipulation of the argument file with the input " leads to cross site scripting. It is possible to initiate the...

PT-2022-21903

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 2.25.5 Description The issue allows remote attackers to attach crafted SVG documents to issue reports or bugnotes. When a user or an admin clicks on the attachment, file download.php opens the SVG document in a brows...

PT-2020-16205

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 2.24.3 Description An issue allows users without access to view private issue notes to download supposedly private attachments linked to these notes by directly accessing the corresponding file download URL...

PT-2017-6810

Name of the Vulnerable Software and Affected Versions MantisBT versions 1.2.19 and earlier Description The issue allows remote authenticated users to download attachments linked to arbitrary private projects. This is possible when the threshold to access files is set to ANYBODY. The file id...

PT-2014-8632

Name of the Vulnerable Software and Affected Versions WordPress Download Manager plugin for WordPress affected versions not specified Description A directory traversal issue exists in the WordPress Download Manager plugin, allowing remote attackers to read arbitrary files. This is achieved by...

PixelGems <= Remote (File Disclosure/LFI) Exploit

Exploit for php platform in category web applications PixelGems Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail : submitat1337day.com 1 0 0 1 1 0 I'm KnocKout member from Inj3ct0r Team 1 1 0...