CVE-2021-38136

Corero SecureWatch Managed Services 9.7.2.0020 is affected by a Path Traversal vulnerability via the snapfile parameter in the /it-IT/splunkd/raw/services/getsnapshot HTTP API endpoint. A ‘low privileged’ attacker can read any file on the target host...

CVE-2021-38136

Corero SecureWatch Managed Services 9.7.2.0020 is affected by a Path Traversal vulnerability via the snapfile parameter in the /it-IT/splunkd/raw/services/getsnapshot HTTP API endpoint. A ‘low privileged’ attacker can read any file on the target host...

CVE-2021-38136

Corero SecureWatch Managed Services 9.7.2.0020 is affected by a Path Traversal vulnerability via the snapfile parameter in the /it-IT/splunkd/raw/services/getsnapshot HTTP API endpoint. A ‘low privileged’ attacker can read any file on the target host...

CVE-2021-37446

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/.. for file reading...

PT-2021-21653

Name of the Vulnerable Software and Affected Versions NCH Axon PBX versions 2.22 and earlier Description The issue allows path traversal for file disclosure via the logprop?file=/.. substring. This enables unauthorized access to files on the system. Recommendations For NCH Axon PBX versions 2.22...

PT-2021-21654

Name of the Vulnerable Software and Affected Versions NCH Axon PBX versions 2.22 and earlier Description The issue allows path traversal for file deletion via the logdelete API endpoint with the file parameter set to /... This enables unauthorized file deletion. Recommendations For versions 2.22...

PT-2021-21652

Name of the Vulnerable Software and Affected Versions NCH FlexiServer version 6.00 Description The issue is related to a path traversal vulnerability in the syslog component, where an attacker can potentially access files outside the intended directory by manipulating the file parameter in the...

CVE-2020-23715

Directory Traversal vulnerability in Webport CMS 1.19.10.17121 via the file parameter to file/download...

CVE-2020-23715

Directory Traversal vulnerability in Webport CMS 1.19.10.17121 via the file parameter to file/download...

Directory traversal

Directory Traversal vulnerability in Webport CMS 1.19.10.17121 via the file parameter to file/download...

CVE-2020-23715

Directory Traversal vulnerability in Webport CMS 1.19.10.17121 via the file parameter to file/download...

PT-2021-10935

Name of the Vulnerable Software and Affected Versions Webport CMS version 1.19.10.17121 Description The issue is related to a Directory Traversal vulnerability. It can be exploited via the file parameter to the "file/download" endpoint. Recommendations For Webport CMS version 1.19.10.17121, as a...

CVE-2020-23715: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in Webport CMS 1.19.10.17121 via the file parameter to file/download...

CVE-2020-20444

Jact OpenClinic 0.8.20160412 allows the attacker to read server files after login to the the admin account by an infected 'file' GET parameter in '/shared/viewsource.php' which "could" lead to RCE vulnerability...

CVE-2020-20444

Jact OpenClinic 0.8.20160412 allows the attacker to read server files after login to the the admin account by an infected 'file' GET parameter in '/shared/viewsource.php' which "could" lead to RCE vulnerability...

Security feature bypass

Jact OpenClinic 0.8.20160412 allows the attacker to read server files after login to the the admin account by an infected 'file' GET parameter in '/shared/viewsource.php' which "could" lead to RCE vulnerability...

CVE-2020-20444

Jact OpenClinic 0.8.20160412 allows the attacker to read server files after login to the the admin account by an infected 'file' GET parameter in '/shared/viewsource.php' which "could" lead to RCE vulnerability...

PT-2021-3440 · Jact · Openclinic

Name of the Vulnerable Software and Affected Versions: Jact OpenClinic version 0.8.20160412 Description: The issue is related to errors in authorization in the shared/view source.php component of the OpenClinic software for managing medical records. An attacker, acting remotely, can exploit this...

Jact OpenClinic 安全漏洞

OpenClinic GA is an open source hospital information management system. The system supports financial management, clinical management and laboratory management. A security vulnerability exists in Jact OpenClinic version 0.8.20160412, which could lead to an RCE vulnerability if an attacker logs in...

CVE-2021-31783

showdefault.php in the LocalFilesEditor extension before 11.4.0.1 for Piwigo allows Local File Inclusion because the file parameter is not validated with a proper regular-expression check...