Design/Logic Flaw

D-link IP camera DCS-2103 with firmware 1.0.0 allows remote attackers to obtain the installation path via the file parameter to cgi-bin/sddownload.cgi, as demonstrated by a / forward slash character...

PT-2014-8889

Name of the Vulnerable Software and Affected Versions D-link IP camera DCS-2103 version 1.0.0 Description The issue allows remote attackers to read arbitrary files via a .. dot dot in the file parameter of the cgi-bin/sddownload.cgi endpoint. Recommendations For D-link IP camera DCS-2103 version...

PT-2014-8893

Name of the Vulnerable Software and Affected Versions D-link IP camera DCS-2103 version 1.0.0 Description The issue allows remote attackers to obtain the installation path. This can be achieved by exploiting the "file" parameter to the "cgi-bin/sddownload.cgi" API endpoint, for example, by using ...

CVE-2012-6665

Directory traversal vulnerability in index.php in phpMoneyBooks 1.0.4 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter, a different vulnerability than CVE-2012-1669. NOTE: the provenance of this information is unknown; the details are obtained solely from thi...

PT-2014-2425

Name of the Vulnerable Software and Affected Versions phpMoneyBooks version 1.0.4 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files by including a .. dot dot in the file parameter of the index.php file. Recommendations For phpMoneyBooks version 1.0....

PT-2014-6372

Name of the Vulnerable Software and Affected Versions webEdition CMS versions prior to 6.3.9.0 Beta Description The issue allows remote authenticated users to read arbitrary files. This is achieved by exploiting a directory traversal vulnerability in the showTempFile.php file, specifically by usi...

Directory traversal

Directory traversal vulnerability in ZOHO ManageEngine Desktop Central DC before 9 build 90055 allows remote attackers to execute arbitrary code via a .. dot dot in the fileName parameter to mdm/mdmLogUploader...

CVE-2014-6308

Directory traversal vulnerability in OSClass before 3.4.2 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter in a render action to oc-admin/index.php...

PT-2014-7145

Name of the Vulnerable Software and Affected Versions OSClass versions prior to 3.4.2 Description The issue allows remote attackers to read arbitrary files by exploiting a directory traversal vulnerability. This is achieved by including a .. dot dot in the file parameter within a render action to...

OsClass 3.4.1 (index.php, file param) - Local File Inclusion

No description provided by source...

LittleSite 0.1 'file' Parameter Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/43495/info LittleSite is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and to...

Splunk collect file Directory Traversal (CVE-2013-6771)

A directory traversal vulnerability has been found in Splunk. The vulnerability is due to insufficient sanitization of user-provided input to the advanced search functionality in the "file" parameter of the "collect" script...

PT-2014-6493

Name of the Vulnerable Software and Affected Versions Download Shortcode plugin versions 0.2.3 and earlier Description The issue allows remote attackers to read arbitrary files via a .. dot dot in the file parameter. This is a directory traversal vulnerability in the force-download.php file...

PT-2014-4021

Name of the Vulnerable Software and Affected Versions Vtiger CRM versions prior to 6.0.0 Security patch 1 Description A directory traversal issue allows remote authenticated users to read arbitrary files via a .. dot dot in the file parameter in a download action. This issue is likely in the...

CVE-2013-6771: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the collect script in Splunk before 5.0.5 allows remote attackers to execute arbitrary commands via a .. dot dot in the file parameter. NOTE: this issue was SPLIT per ADT2 due to different vulnerability types. CVE-2013-7394 is for the issue in the...

PT-2014-6326

Name of the Vulnerable Software and Affected Versions tom-m8te plugin version 1.5.3 Description The issue allows remote attackers to read arbitrary files. This is achieved via the file parameter to the "tom-download-file.php" endpoint. Recommendations For tom-m8te plugin version 1.5.3, consider...

CVE-2014-5187: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Tom M8te tom-m8te plugin 1.5.3 for WordPress allows remote attackers to read arbitrary files via the file parameter to tom-download-file.php...

WordPress SCv1 Theme - Local File Disclosure

Estrutura Basica themes are prone to a local file disclosure vulnerability via the "file" parameter. Solution Update the theme...

CVE-2014-3064

The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to read arbitrary files via a crafted UNIX file parameter...

Design/Logic Flaw

The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to read arbitrary files via a crafted UNIX file parameter...