CVE-2017-20152

A vulnerability, which was classified as problematic, was found in aerouk imageserve. Affected is an unknown function of the file public/viewer.php of the component File Handler. The manipulation of the argument filelocation leads to path traversal. It is possible to launch the attack remotely. T...

Aerouk Imageserve path traversal vulnerability

imageserve is a ShareX image hosting solution for Tom's own domain for individual developers. A path traversal vulnerability exists in aerouk imageserve, which stems from incorrect manipulation of the parameter filelocation resulting in path traversal...

CVE-2008-6002: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when registerglobals is enabled, allows remote attackers to read arbitrary files via a full pathname in the filelocation parameter...

webcp 0.5.7 - filelocation Remote File Disclosure

webcp 0.5.7 - filelocation Remote File Disclosure webcp 0.5.7 sendfile.php filelocation Remote File Disclosure Vulnerability Script : http://www.web-cp.net/releases/webcp-0.5.7.tar.gz Demo : http://gyrbo.madoka.be/web-cp/ Vuln : if $tf = fopen$filelocation, "r" // Date in the past POC :...