CVE-2016-9483

The PHP form code generated by PHP FormMail Generator deserializes untrusted input as part of the phpfmgfilmandownload function. A remote unauthenticated attacker may be able to use this vulnerability to inject PHP code, or along with CVE-2016-9484 to perform local file inclusion attacks and obta...

tmock Directory Traversal Vulnerability

tmock is a static file server. A directory traversal vulnerability exists in tmock. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

nodeaaaaa Directory Traversal Vulnerability

nodeaaaaa is a static file server. A directory traversal vulnerability exists in nodeaaaaa. An attacker can gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

liyujing path traversal vulnerability

liyujing is a static file server. A path traversal vulnerability exists in liyujing. An attacker can exploit this vulnerability by placing a '... /' sequence in the URL to gain access to the file system...

Welcomyzt Path Traversal Vulnerability

welcomyzt is a file server. A path traversal vulnerability exists in welcomyzt. An attacker could gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

node-server-forfront path traversal vulnerability

node-server-forfront is a static file server. A path traversal vulnerability exists in node-server-forfront. An attacker can gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

Serverzyy Path Traversal Vulnerability

serverzyy is a static file server. A path traversal vulnerability exists in serverzyy. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system...

jikes path traversal vulnerability

jikes is a file server. A directory traversal vulnerability exists in jikes. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence into a URL to gain access to the file system...

lab6.brit95 Path Traversal Vulnerability

lab6.brit95 is a file server. A path traversal vulnerability exists in lab6.brit95. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

Path Traversal in Sprockets

Specially crafted requests can be used to access files that exist on the filesystem that is outside an application's root directory, when the Sprockets server is used in production. All users running an affected release should either upgrade or use one of the work arounds immediately. Workaround:...

crud-file-server node module cross-site scripting vulnerability

The crud-file-server node module is a file server that supports create, read, update and delete functions. A cross-site scripting vulnerability exists in crud-file-server node module versions prior to 0.8.0, which stems from the program's lack of file name validation. A remote attacker can exploi...

App Layering: How to force the ELM to use a specific SMB version for file servers

In the ELM, when connecting to a file share, we test all the SMB versions that we support, from top to bottom, until we get a successful login. We specifically try 3.02, 3.0, 2.1, 2.0 and 1.0, in that order, before giving up. An SMB server is supposed to return "Not Supported" when an attempt is...

ecstatic node module denial of service vulnerability

ecstatic node module is a http cooperative static file server middleware . A security vulnerability exists in ecstatic node module versions prior to 1.4.0. An attacker can exploit this vulnerability to cause a denial of service crash by sending input with the help of the If-Modified-Since packet...

hcbserver directory traversal vulnerability

hcbserver is a static file server. A directory traversal vulnerability exists in hcbserver. An attacker can exploit this vulnerability by placing "... /" in a URL to access the file system...

caolilinode directory traversal vulnerability

caolilinode is a file server. A directory traversal vulnerability exists in caolilinode. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

qinserve Directory Traversal Vulnerability

qinserve is a static file server. A directory traversal vulnerability exists in qinserve. An attacker can exploit this vulnerability by placing "... /" in a URL to access the file system...

360class.jansenhm Directory Traversal Vulnerability

360class.jansenhm is a static file server. A directory traversal vulnerability exists in 360class.jansenhm. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system...

liuyaserver directory traversal vulnerability

liuyaserver is a static file server. A directory traversal vulnerability exists in liuyaserver. An attacker can exploit this vulnerability by placing "... /" in a URL to access the file system...

Serverxxx Directory Traversal Vulnerability

serverxxx is a static file server. A directory traversal vulnerability exists in serverxxx. An attacker can gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

myserver.alexcthomas18 Directory Traversal Vulnerability

myserver.alexcthomas18 is a file server. A directory traversal vulnerability exists in myserver.alexcthomas18. An attacker can exploit this vulnerability by placing ". /" in a URL to access the file system...