10 matches found
OnlyOffice-path-traversal
ONLYOFFICE Path Traversal 익스플로잇 CVE-2023-46988 📌 개요 이 스크립트는 ONLYOFFICE Document Server 의 경로 탐색Path Traversal 취약점CVE-2023-46988을 악용하여, 인증되지 않은 사용자가 서버에서 임의의 파일을 복사 할 수 있게 합니다. 이 취약점은 /example/editor 엔드포인트에 존재하며, fileExt 매개변수를 조작하여 민감한 시스템 및 구성 파일에 접근할 수 있습니다. ⚠️ 면책 조항 이 도구는 교육 및 승인된 보안 연구 목적으로만...
CVE-2025-45870
LogicalDOC Enterprise up to and for v9.1.1 is vulnerable to Local File Inclusion LFI in the OnlyOfficeEditor servlet class, allowing authenticated user to exploit path traversal flaws in the fileExt parameter, enabling unauthorized access to sensitive files outside the designated directories...
CVE-2025-45870
LogicalDOC Enterprise up to and for v9.1.1 is vulnerable to Local File Inclusion LFI in the OnlyOfficeEditor servlet class, allowing authenticated user to exploit path traversal flaws in the fileExt parameter, enabling unauthorized access to sensitive files outside the designated directories...
CVE-2025-45870
LogicalDOC Enterprise up to and for v9.1.1 is vulnerable to Local File Inclusion LFI in the OnlyOfficeEditor servlet class, allowing authenticated user to exploit path traversal flaws in the fileExt parameter, enabling unauthorized access to sensitive files outside the designated directories...
EUVD-2021-23134
Malware in sbrugna...
CVE-2021-36532
Race condition vulnerability discovered in portfolioCMS 1.0 allows remote attackers to run arbitrary code via fileExt parameter to localhost/admin/uploads.php...
CVE-2021-36532
Race condition vulnerability discovered in portfolioCMS 1.0 allows remote attackers to run arbitrary code via fileExt parameter to localhost/admin/uploads.php...
CVE-2021-36532
Race condition vulnerability discovered in portfolioCMS 1.0 allows remote attackers to run arbitrary code via fileExt parameter to localhost/admin/uploads.php...
