Lucene search
K

6 matches found

Cvelist
Cvelist
added 2026/06/09 11:48 a.m.26 views

CVE-2017-20248 WordPress Plugin Apptha Slider Gallery 1.0 Path Traversal File Download

Apptha Slider Gallery 1.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the imgname parameter. Attackers can send requests to asgallDownload.php with directory traversal sequences ../ to access sensitive files outside the...

8.7CVSS0.00641EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/06/09 12:0 a.m.7 views

Apptha Slider Gallery 路径遍历漏洞

Apptha Slider Gallery is a website image carousel and gallery display plugin provided by Apptha Corporation. Version 1.0 of Apptha Slider Gallery contains a path traversal vulnerability. This vulnerability stems from improper handling of the imgname parameter, which may allow unauthenticated...

8.7CVSS5.5AI score0.00641EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/02/16 12:0 a.m.5 views

PT-2025-6879 · Cmseasy · Cmseasy

Name of the Vulnerable Software and Affected Versions: CmsEasy version 7.7.7.9 Description: A vulnerability has been found in the function deleteimg action in the library lib/admin/image admin.php. The manipulation of the argument imgname leads to path traversal. The attack can be launched...

8.1CVSS4.9AI score0.00951EPSS
Exploits1References10
Positive Technologies
Positive Technologies
added 2025/02/16 12:0 a.m.4 views

PT-2025-6878 · Cmseasy · Cmseasy

Name of the Vulnerable Software and Affected Versions: CmsEasy version 7.7.7.9 Description: A vulnerability was found in the function deleteimg action in the library lib/admin/file admin.php. The manipulation of the argument imgname leads to path traversal. It is possible to launch the attack...

8.1CVSS4.9AI score0.00866EPSS
Exploits1References11
CNNVD
CNNVD
added 2025/02/16 12:0 a.m.2 views

CmsEasy 路径遍历漏洞

CmsEasy is a content management system CMS for creating responsive websites from China's CmsEasy company. A path traversal vulnerability exists in CmsEasy version 7.7.7.9, which stems from the parameter imgname of the function deleteimgaction that causes path traversal...

8.1CVSS4.9AI score0.00951EPSS
Exploits1References5
OSV
OSV
added 2020/03/12 2:15 p.m.4 views

CVE-2020-10457

Path Traversal in admin/imagepaster/image-renaming.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to rename any file on the webserver using a dot-dot-slash sequence ../ via the POST parameter imgName for the new name and imgUrl for the current file to be renamed...

2.7CVSS5.8AI score0.01084EPSS
Exploits1References2
Rows per page
Query Builder