CVE-2023-37739---Path-Traversal-in-i-doit-Pro-25-and-below

CVE-2023-37739 - Path Traversal in i-doit Pro 25 and below i-doit Pro 25 and below are vulnerable to Path Traversal vulnerability. These vulnerabilities could allows remote authenticated attackers low or high privilege to navigate to locations that should not be accessible to the user.it can be...

CVE-2018-16373

CVE-2018-16373 There is a Upload vulnerability that can create file via /admin/?/plugin/filemanager/save,more detail see:https://github.com/philippe/FrogCMS/issues/13...

CVE-2026-45744: Improper Neutralization of Special Elements used in an OS Command

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the GET /ssh/filemanager/ssh/resolvePath endpoint in Termix is vulnerable to OS command injection. The endpoint uses double-quote escaping for shell command...

CVE-2026-5258: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was found in Sanster IOPaint 1.5.3. Impacted is the function getfile of the file iopaint/filemanager/filemanager.py of the component File Manager. Performing a manipulation of the argument filename results in path traversal. The attack is possible to be carried out remotely. The...

CVE-2026-29597: Improper Access Control

DDSN Interactive cm3 Acora CMS version 10.7.1 contains an improper access control vulnerability. An editor-privileged user can access sensitive configuration files by force browsing the “/Admin/filemanager/filedetails.asp” endpoint and manipulating the “file” parameter. By referencing specific...

EUVD-2015-4482

Malware in sbrugna...

EUVD-2012-5092

Malware in sbrugna...

EUVD-2015-4483

Malware in sbrugna...

CVE-2024-46086

Summary: CVE-2024-46086 affects FrogCMS v0.9.5 with a Cross-Site Request Forgery (CSRF) vulnerability exploitable through the API endpoint /admin/?/plugin/file_manager/delete/123. The Red Hat, NVD, CVE lists corroborate the issue as CSRF with high impact metrics (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U...

CVE-2024-46086: Cross-Site Request Forgery (CSRF)

FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/plugin/filemanager/delete/123...

CVE-2024-46086

FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/plugin/filemanager/delete/123...

CVE-2024-46362

FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/plugin/filemanager/createdirectory...

CVE-2024-46085

FrogCMS version V0.9.5 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability involving the /admin/?/plugin/file_manager/rename API endpoint. This flaw allows an attacker to perform unauthorized actions, specifically leading to unauthorized file renaming . As a workaround, it is recom...

CVE-2024-46362: Cross-Site Request Forgery (CSRF)

FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/plugin/filemanager/createdirectory...

CVE-2024-46085: Cross-Site Request Forgery (CSRF)

FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/plugin/filemanager/rename...

CVE-2024-8165

A vulnerability was identified in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. This vulnerability affects the function exportZip of the file /admin/filemanager/export. Such manipulation of the argument path leads to path traversal. The attack can be launched remotely. The exploit i...

CVE-2024-8165: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was identified in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. This vulnerability affects the function exportZip of the file /admin/filemanager/export. Such manipulation of the argument path leads to path traversal. The attack can be launched remotely. The exploit i...

Everbrite BeikeShop path traversal vulnerability

Everbrite BeikeShop is an e-commerce system from China Everbright Everbrite. A path traversal vulnerability exists in Everbrite BeikeShop 1.5.5 and earlier versions, which originates in the exportZip function of file /admin/filemanager/export, where manipulation of the parameter path can lead to...

CVE-2024-8163: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. Affected by this issue is the function destroyFiles of the file /admin/filemanager/files. The manipulation of the argument files results in path traversal. It is possible to launch the attack remotely. The...

CVE-2024-42630: Cross-Site Request Forgery (CSRF)

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/plugin/filemanager/createfile...