57 matches found
CVE-2018-16373
CVE-2018-16373 Hay una vulnerabilidad de carga que puede crear un archivo a través de /admin/?/plugin/filemanager/save, más detalles en:https://github.com/philippe/FrogCMS/issues/13...
CVE-2023-37739---Path-Traversal-in-i-doit-Pro-25-and-below
CVE-2023-37739 - Path Traversal en i-doit Pro 25 y anteriores i-doit Pro 25 y versiones anteriores son vulnerables a una vulnerabilidad de Path Traversal. Estas vulnerabilidades podrían permitir a atacantes autenticados remotos con privilegios bajos o altos navegar a ubicaciones que no deberían s...
CVE-2026-45744: Improper Neutralization of Special Elements used in an OS Command
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the GET /ssh/filemanager/ssh/resolvePath endpoint in Termix is vulnerable to OS command injection. The endpoint uses double-quote escaping for shell command...
CVE-2026-5258: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in Sanster IOPaint 1.5.3. Impacted is the function getfile of the file iopaint/filemanager/filemanager.py of the component File Manager. Performing a manipulation of the argument filename results in path traversal. The attack is possible to be carried out remotely. The...
CVE-2026-29597: Improper Access Control
DDSN Interactive cm3 Acora CMS version 10.7.1 contains an improper access control vulnerability. An editor-privileged user can access sensitive configuration files by force browsing the “/Admin/filemanager/filedetails.asp” endpoint and manipulating the “file” parameter. By referencing specific...
EUVD-2012-5092
Malware in sbrugna...
EUVD-2015-4483
Malware in sbrugna...
EUVD-2015-4482
Malware in sbrugna...
CVE-2024-46086
FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/plugin/filemanager/delete/123...
CVE-2024-46086: Cross-Site Request Forgery (CSRF)
FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/plugin/filemanager/delete/123...
CVE-2024-46086
Summary: CVE-2024-46086 affects FrogCMS v0.9.5 with a Cross-Site Request Forgery (CSRF) vulnerability exploitable through the API endpoint /admin/?/plugin/file_manager/delete/123. The Red Hat, NVD, CVE lists corroborate the issue as CSRF with high impact metrics (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U...
CVE-2024-46362
FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/plugin/filemanager/createdirectory...
CVE-2024-46362: Cross-Site Request Forgery (CSRF)
FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/plugin/filemanager/createdirectory...
CVE-2024-46085
FrogCMS version V0.9.5 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability involving the /admin/?/plugin/file_manager/rename API endpoint. This flaw allows an attacker to perform unauthorized actions, specifically leading to unauthorized file renaming . As a workaround, it is recom...
CVE-2024-46085: Cross-Site Request Forgery (CSRF)
FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/plugin/filemanager/rename...
CVE-2024-8165
A vulnerability was identified in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. This vulnerability affects the function exportZip of the file /admin/filemanager/export. Such manipulation of the argument path leads to path traversal. The attack can be launched remotely. The exploit i...
Everbrite BeikeShop 路径遍历漏洞
Everbrite BeikeShop is an e-commerce system from China Everbright Everbrite. A path traversal vulnerability exists in Everbrite BeikeShop 1.5.5 and earlier versions, which originates in the exportZip function of file /admin/filemanager/export, where manipulation of the parameter path can lead to...
CVE-2024-8165: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was identified in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. This vulnerability affects the function exportZip of the file /admin/filemanager/export. Such manipulation of the argument path leads to path traversal. The attack can be launched remotely. The exploit i...
CVE-2024-8163: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. Affected by this issue is the function destroyFiles of the file /admin/filemanager/files. The manipulation of the argument files results in path traversal. It is possible to launch the attack remotely. The...