CVE-2017-20152

A vulnerability, which was classified as problematic, was found in aerouk imageserve. Affected is an unknown function of the file public/viewer.php of the component File Handler. The manipulation of the argument filelocation leads to path traversal. It is possible to launch the attack remotely. T...

aerouk imageserve 路径遍历漏洞

imageserve is a ShareX image hosting solution for Tom's own domain for individual developers. A path traversal vulnerability exists in aerouk imageserve, which stems from incorrect manipulation of the parameter filelocation resulting in path traversal...

CVE-2008-6002: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when registerglobals is enabled, allows remote attackers to read arbitrary files via a full pathname in the filelocation parameter...

webcp 0.5.7 - filelocation Remote File Disclosure

webcp 0.5.7 - filelocation Remote File Disclosure webcp 0.5.7 sendfile.php filelocation Remote File Disclosure Vulnerability Script : http://www.web-cp.net/releases/webcp-0.5.7.tar.gz Demo : http://gyrbo.madoka.be/web-cp/ Vuln : if $tf = fopen$filelocation, "r" // Date in the past POC :...