Lucene search
+L

5 matches found

Cvelist
Cvelist
•added 2017/12/20 9:00 a.m.•37 views

CVE-2017-17793

Information Disclosure vulnerability in creerfichierzip in admin/maintenance.php in BlogoText through 3.7.6 allows remote attackers to defeat a filename-randomization protection mechanism, and read backup archives on Windows servers, by providing the archiv1.zip name aka an 8.3 filename...

7.3AI score0.02166EPSS
SaveExploits0References2
Mend
Mend
•added 2017/12/20 9:00 a.m.•5 views

CVE-2017-17793

Information Disclosure vulnerability in creerfichierzip in admin/maintenance.php in BlogoText through 3.7.6 allows remote attackers to defeat a filename-randomization protection mechanism, and read backup archives on Windows servers, by providing the archiv1.zip name aka an 8.3 filename...

8.7CVSS0.02166EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/12/20 12:00 a.m.•4 views

PT-2017-14999

Name of the Vulnerable Software and Affected Versions BlogoText versions prior to 3.7.7 Description The issue allows remote attackers to read backup archives on Windows servers by defeating a filename-randomization protection mechanism. This can be achieved by providing the archiv1.zip name, whic...

7.5CVSS0.02166EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/20 12:00 a.m.•6 views

CVE-2017-17793: Exposure of Sensitive Information to an Unauthorized Actor

Information Disclosure vulnerability in creerfichierzip in admin/maintenance.php in BlogoText through 3.7.6 allows remote attackers to defeat a filename-randomization protection mechanism, and read backup archives on Windows servers, by providing the archiv1.zip name aka an 8.3 filename...

7.5CVSS7.3AI score0.02166EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2011/12/29 12:00 a.m.•5 views

PT-2011-5010

Name of the Vulnerable Software and Affected Versions Zabbix versions prior to 1.8.10 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters to various PHP files, including hostgroups.php, usergrps.php, hosts.php, scripts.php, and...

4.3CVSS0.01321EPSS
SaveExploits0References13
Rows per page
Query Builder