Chadha PHPKB path traversal vulnerability (CNVD-2020-18322)

Chadha Software Technologies PHPKB Standard Multi-Language is a web-based, multi-language knowledge base management system from Chadha Software Technologies, India. A path traversal vulnerability exists in admin/assetmanager/assetmanager.php in Chadha PHPKB Standard Multi-Language 9. An attacker...

CVE-2020-10459: Improper Limitation of a Pathname to a Restricted Directory

Path Traversal in admin/assetmanager/assetmanager.php vulnerable function saved in admin/assetmanager/functions.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to list the files that are stored on the webserver using a dot-dot-slash sequence ../ via the POST parameter inpCurrFolder...

PT-2020-12129 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to list files stored on the web server by exploiting a Path Traversal vulnerability in the admin/assetmanager/assetmanager.php file, specifically through t...

CVE-2008-2863: Improper Limitation of a Pathname to a Restricted Directory

Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer ESC 2.6 allow remote attackers to create or delete arbitrary directories via a full pathname in the inpCurrFolder parameter to 1 folderdel.asp or 2 foldernew.asp in cms/assetmanager/...