2 matches found
CVE-2022-22793: Undefined Security Weakness
Cybonet - PineApp Mail Relay Local File Inclusion. Attacker can send a request to : /manage/mailpolicymtm/log/emlviewer/email.content.body.php?filesystempath=ENCDODED PATH and by doing that, the attacker can read Local Files inside the server...
7.5CVSS7.2AI score0.00695EPSS
SaveExploits0References1
Path traversal
An issue was discovered in modaliasphysicalhandler in modalias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias target, with a specific modalias configuration where the matched alias lacks a trailing '/' character, but the alias target...
5CVSS7.4AI score0.13714EPSS
SaveExploits1References3Affected Software5
20