CVE-2013-1891

In OpenCart 1.4.7 to 1.5.5.1, implemented anti-traversal code in filemanager.php is ineffective and can be bypassed...

CVE-2013-1891

OpenCart 1.4.7–1.5.5.1 contains a directory traversal vulnerability in filemanager.php where the anti-traversal check is ineffective and can be bypassed. This affects code handling file paths, enabling potential access outside the intended directory structure. The CVE notes indicate an impact on ...

CVE-2013-1891

In OpenCart 1.4.7 to 1.5.5.1, implemented anti-traversal code in filemanager.php is ineffective and can be bypassed...

CVE-2013-1891: Improper Limitation of a Pathname to a Restricted Directory

In OpenCart 1.4.7 to 1.5.5.1, implemented anti-traversal code in filemanager.php is ineffective and can be bypassed...

PT-2021-4014

Name of the Vulnerable Software and Affected Versions TCExam versions prior to 14.8.2 Description A stored cross-site scripting issue exists, allowing an attacker to upload a malicious JavaScript payload via tce filemanager.php with a filename starting with a period. This payload would be trigger...

Codiad Remote Command Execution Vulnerability

Codiad is a U.S. software developer Kent Safranski developed a set of Web-based IDE framework , it contains a project/file manager and code editor , mainly used for online writing and editing code . A remote command execution vulnerability exists in the components/filemanager/class.filemanager.ph...

CVE-2015-1041

CVE-2015-1041 Affect: e107 CMS, version 1.0.4. Issue: Cross-site scripting (XSS) in e107_admin/filemanager.php allows remote attackers to inject arbitrary web script/HTML via the e107_files/ path in the QUERY_STRING. Root cause: insufficient input validation/escaping of the file path parameter. I...

CVE-2015-1041: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in e107admin/filemanager.php in e107 1.0.4 allows remote attackers to inject arbitrary web script or HTML via the e107files/ file path in the QUERYSTRING...

PLESK 7.5/7.6 - Filemanager.PHP Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20155/info PLESK is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system...

OpenCart 1.5.5.1 (filemanager.php) - Directory Traversal Arbitrary File Access

No description provided by source. waraxe-2013-SA098 - Directory Traversal Vulnerabilities in OpenCart 1.5.5.1 =============================================================================== Author: Janek Vind waraxe Date: 19. March 2013 Location: Estonia, Tartu Web:...

CVE-2014-3975

CVE-2014-3975 describes an absolute path traversal in AuraCMS 3.0, exploitable through filemanager.php via a full pathname in the viewdir parameter, allowing remote attackers to list directories. The vulnerability is documented across multiple sources (NVD/Red Hat/CVE list), with the core issue b...

CVE-2014-3974

AuraCMS 3.0 and earlier is affected by an XSS in filemanager.php (via the viewdir parameter). The vulnerability stems from unsanitized input in viewdir, enabling injection of arbitrary script/HTML. Affected product is AuraCMS; version scope is 3.0 and earlier. Public references indicate the issue...

CVE-2014-3975

Absolute path traversal vulnerability in filemanager.php in AuraCMS 3.0 allows remote attackers to list a directory via a full pathname in the viewdir parameter...

CVE-2014-3975: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in filemanager.php in AuraCMS 3.0 allows remote attackers to list a directory via a full pathname in the viewdir parameter...

CVE-2014-3974: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in filemanager.php in AuraCMS 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the viewdir parameter...

OpenCart 1.5.5.1 - FileManager.php Directory Traversal Arbitrary File Access

OpenCart 1.5.5.1 - FileManager.php Directory Traversal Arbitrary File Access waraxe-2013-SA098 - Directory Traversal Vulnerabilities in OpenCart 1.5.5.1 =============================================================================== Author: Janek Vind "waraxe" Date: 19. March 2013 Location:...

OpenCart 1.5.5.1 - 'FileManager.php' Directory Traversal Arbitrary File Access

waraxe-2013-SA098 - Directory Traversal Vulnerabilities in OpenCart 1.5.5.1 =============================================================================== Author: Janek Vind "waraxe" Date: 19. March 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-98.html Description of vulnerabl...

Flatnux 2009-01-27 Remote File Inclusion

@ flatnux Flatnux-2009-01-27 RFI zależności P + Alfons Luja + 2009 + grts : All friends VULN : +++ include/theme.php ... ?php if eregi"theme.php", $SERVER'PHPSELF' die; // 0 -- I dont give a fuck global $theme, $FNROOTPATH,$lang; //-- 1 global $forumback, $forumborder;...

Flatnux 2009-01-27 - Remote File Inclusion

@ flatnux Flatnux-2009-01-27 RFI zależności P + Alfons Luja + 2009 + grts : All friends VULN : +++ include/theme.php ... ?php if eregi"theme.php", $SERVER'PHPSELF' die; // 0 -- I dont give a fuck global $theme, $FNROOTPATH,$lang; //-- 1 global $forumback, $forumborder;...

Flatnux 2009-01-27 - Remote File Inclusion

Flatnux 2009-01-27 - Remote File Inclusion @ flatnux Flatnux-2009-01-27 RFI zależności P + Alfons Luja + 2009 + grts : All friends VULN : +++ include/theme.php ... ?php if eregi"theme.php", $SERVER'PHPSELF' die; // 0 -- I dont give a fuck global $theme, $FNROOTPATH,$lang; //-- 1 global...