5 matches found
CVE-2017-17793
Information Disclosure vulnerability in creerfichierzip in admin/maintenance.php in BlogoText through 3.7.6 allows remote attackers to defeat a filename-randomization protection mechanism, and read backup archives on Windows servers, by providing the archiv1.zip name aka an 8.3 filename...
CVE-2017-17793
Information Disclosure vulnerability in creerfichierzip in admin/maintenance.php in BlogoText through 3.7.6 allows remote attackers to defeat a filename-randomization protection mechanism, and read backup archives on Windows servers, by providing the archiv1.zip name aka an 8.3 filename...
PT-2017-14999
Name of the Vulnerable Software and Affected Versions BlogoText versions prior to 3.7.7 Description The issue allows remote attackers to read backup archives on Windows servers by defeating a filename-randomization protection mechanism. This can be achieved by providing the archiv1.zip name, whic...
CVE-2017-17793: Exposure of Sensitive Information to an Unauthorized Actor
Information Disclosure vulnerability in creerfichierzip in admin/maintenance.php in BlogoText through 3.7.6 allows remote attackers to defeat a filename-randomization protection mechanism, and read backup archives on Windows servers, by providing the archiv1.zip name aka an 8.3 filename...
PT-2011-5010
Name of the Vulnerable Software and Affected Versions Zabbix versions prior to 1.8.10 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters to various PHP files, including hostgroups.php, usergrps.php, hosts.php, scripts.php, and...