CVE-2014-9046

The OCUtil::getUrlContent function in ownCloud Server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to read arbitrary files via a file:// protocol...

Server: Potential local file disclosure

ownCloud offers the OCUtil::getUrlContent to developers. Using this function applications can download content from remote websites. Due to a newly introduced bug in this functionality it was following redirects to other protocols such as file://. Thus, an attacker may be able to gain access to...

CMS Made Simple <= 1.6.2 Local File Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================ CMS Made Simple = 1.6.2 Local File Disclosure Vulnerability ============================================================ CMS Made Simple = 1.6.2 Class: LFI Reported: 29/07/2009...