1892 matches found
CVE-2019-19993
An issue was discovered in Selesta Visual Access Manager VAM 4.15.0 through 4.29. Several full path disclosure vulnerability were discovered. A user, even with no authentication, may simply send arbitrary content to the vulnerable pages to generate error messages that expose some full paths...
CVE-2013-2624
Telean before 1.3.1 contains a full path disclosure vulnerability which could allow remote attackers to obtain sensitive information through a specially crafted URL request...
CVE-2013-2631
TinyWebGallery TWG 1.8.9 and earlier contains a full path disclosure vulnerability which allows remote attackers to obtain sensitive information through the parameters "twgbrowserx" and "twgbrowsery" in the page image.php...
Path traversal
TinyWebGallery TWG 1.8.9 and earlier contains a full path disclosure vulnerability which allows remote attackers to obtain sensitive information through the parameters "twgbrowserx" and "twgbrowsery" in the page image.php...
CVE-2013-2631
TinyWebGallery TWG 1.8.9 and earlier contains a full path disclosure vulnerability which allows remote attackers to obtain sensitive information through the parameters "twgbrowserx" and "twgbrowsery" in the page image.php...
CVE-2013-2624
Telaen before 1.3.1 is affected by a path-disclosure vulnerability that can reveal sensitive information via specially crafted URLs (full path disclosure through redir.php), with additional issues including remote redirection and reflected XSS in older versions (Telaen <= 1.3.0). The CVE entry...
CVE-2013-2624
Telean before 1.3.1 contains a full path disclosure vulnerability which could allow remote attackers to obtain sensitive information through a specially crafted URL request...
Nokia IMPACT path traversal vulnerability (CNVD-2019-44224)
Nokia IMPACT is a suite of intelligent management platforms for the Internet of Things IoT from the Finnish company Nokia. A path traversal vulnerability exists in Nokia IMPACT. An attacker can exploit this vulnerability to disclose the full path...
CVE-2019-17404
Nokia IMPACT 18A: allows full path disclosure...
CVE-2019-17404
Nokia IMPACT 18A: allows full path disclosure...
CVE-2019-17404
CVE-2019-17404 concerns Nokia IMPACT before version 18A, where a path traversal flaw allows an attacker to disclose the full filesystem path. The issue is described across multiple sources (CNVD-2019-44224, Red Hat RH:CVE-2019-17404, NVD CVE-2019-17404). The connected documents do not provide exp...
Honeywell MCR Web Controller Cross Site Scripting / Path Disclosure
Honeywell MCR Web Controller Full Path Disclosure & Cross Site Scripting Vendor Homepage: https://www.honeywell.com WebVersion: XL1000C50 EXCEL WEB 52 I/O, XL1000C500 EXCEL WEB 300 I/O, XL1000C100 EXCEL WEB 104 I/O, XL1000C1000 EXCEL WEB 600 I/O, XL1000C50U EXCEL WEB 52 I/O UUKL, XL1000C500U EXCE...
Fast Velocity Minify < 2.7.7 - Full Path Disclosure
The Fast Velocity Minify WordPress plugin was affected by a Full Path Disclosure security vulnerability...
Nextcloud: Exposing debug.log file leads to server full path disclosure
At the following address i have found debug.log file disclose the application full path on the server. https://nextcloud.com/wp-content/debug.log Impact The server should not expose this log file as it could help an attacker to understand the environment that may lead to further attacks...
CVE-2014-10388
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path disclosure...
Path traversal
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path disclosure...
CVE-2014-10388
CVE-2014-10388 affects the WordPress plugin wp-support-plus-responsive-ticket-system prior to version 4.2. Multiple connected sources (RH, NVD, CVE lists, WPVulnDB) consistently describe a full path disclosure vulnerability in this plugin, enabling disclosure of server file paths. Public details ...
Unspecified Vulnerability in CouchCMS
CouchCMS is an open source content management system CMS for designers. A security vulnerability exists in the includes/mysql2i/mysql2i.func.php and adds/phpmailer/phpmailer.php files in CouchCMS version 2. An attacker can exploit the vulnerability to disclose the full path...
Gallery Photoblocks < 1.1.41 - Unauthenticated Reflected XSS
Also Full Path Disclosure depending on the configuration of the server PoC https:///wp-content/plugins/photoblocks-grid-gallery/admin/partials/photoblocks-edit.php?id="...