PT-2017-14019

Name of the Vulnerable Software and Affected Versions 3CX Phone System version 15.5.3554.1 Description The issue allows for a directory traversal attack, which can be exploited by an authenticated attacker to access sensitive information. This can aid in subsequent attacks. The vulnerable API...

CVE-2017-15363

Directory traversal vulnerability in public/examples/resources/getsource.php in Luracast Restler through 3.0.0, as used in the restler extension before 1.7.1 for TYPO3, allows remote attackers to read arbitrary files via the file parameter...

CVE-2017-15363

CVE-2017-15363 is a directory traversal vulnerability affecting Luracast Restler up to version 3.0.0 when used with TYPO3 Restler extension before 1.7.1. The issue occurs in public/examples/resources/getsource.php, where the file parameter can be used to read arbitrary local files. Affected stack...

CVE-2017-15287

There is XSS in the BouquetEditor WebPlugin for Dream Multimedia Dreambox devices, as demonstrated by the "Name des Bouquets" field, or the file parameter to the /file URI...

Dolibarr document.php File Information Disclosure Vulnerability

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. An information disclosure vulnerability exists in the...

UBUNTU-CVE-2017-14240

There is a sensitive information disclosure vulnerability in document.php in Dolibarr ERP/CRM version 6.0.0 via the file parameter...

Information disclosure

There is a sensitive information disclosure vulnerability in document.php in Dolibarr ERP/CRM version 6.0.0 via the file parameter...

CVE-2017-14240

There is a sensitive information disclosure vulnerability in document.php in Dolibarr ERP/CRM version 6.0.0 via the file parameter...

CVE-2017-14240

There is a sensitive information disclosure vulnerability in document.php in Dolibarr ERP/CRM version 6.0.0 via the file parameter...

CVE-2017-14240

There is a sensitive information disclosure vulnerability in document.php in Dolibarr ERP/CRM version 6.0.0 via the file parameter...

CVE-2017-14240

CVE-2017-14240 affects Dolibarr ERP/CRM 6.0.0 and is a vulnerability in the file parameter of the document.php script that leads to information disclosure. The issue, described in multiple sources, enables an attacker to obtain sensitive data via the documented file parameter without authenticati...

PT-2017-13316

Name of the Vulnerable Software and Affected Versions Dolibarr ERP/CRM version 6.0.0 Description A sensitive information disclosure issue exists in document.php via the file parameter. Recommendations For version 6.0.0, update to a newer version that contains a fix for this issue...

CVE-2017-14240: Exposure of Sensitive Information to an Unauthorized Actor

There is a sensitive information disclosure vulnerability in document.php in Dolibarr ERP/CRM version 6.0.0 via the file parameter...

EyesOfNetwork web interface path traversal vulnerability

EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides business process configuration tools, generating pop-up windows when events occur in the active queue, etc. EyesOfNetwork web interface aka eonweb is one of the web interfaces. A security vulnerability exists ...

PT-2017-13096

Name of the Vulnerable Software and Affected Versions EyesOfNetwork web interface aka eonweb versions 5.1-0 Description The issue allows directory traversal attacks, enabling the reading of arbitrary files. This is achieved via the file parameter in the module/admin conf/download.php API endpoint...

GLPI front/backup.php file arbitrary file deletion vulnerability

GLPI is an open source IT resource management suite maintained by the Indepnet Association. The suite includes features such as device status management, asset inventory storage, management processes and work log management. A security vulnerability exists in the front/backup.php file in versions...

UBUNTU-CVE-2017-11183

front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter...

PT-2017-11805

Name of the Vulnerable Software and Affected Versions GLPI versions prior to 9.1.5 Description The issue allows remote authenticated administrators to delete arbitrary files by crafting the file parameter in the front/backup.php script. Recommendations For versions prior to 9.1.5, update to versi...

Fiyo CMS Arbitrary File Deletion Vulnerability (CNVD-2017-26594)

Fiyo CMS is a content management system CMS for creating CMS templates. A security vulnerability exists in the dapur\apps\appconfig\controller\backuper.php file in Fiyo CMS version 2.0.7. The vulnerability can be exploited by a remote attacker to delete arbitrary files using the 'file' parameter ...

PT-2017-12141

Name of the Vulnerable Software and Affected Versions Fiyo CMS version 2.0.7 Description The issue allows remote attackers to delete arbitrary files via directory traversal sequences in the file parameter in a type=database request to the /dapur/apps/app config/controller/backuper.php endpoint...