CVE-2019-7751

A directory traversal and local file inclusion vulnerability in FPProducerInternetServer.exe in Ricoh MarcomCentral, formerly PTI Marketing, FusionPro VDP before 10.0 allows a remote attacker to list or enumerate sensitive contents of files. Furthermore, this could allow for privilege escalation ...

CVE-2019-7751

A directory traversal and local file inclusion vulnerability in FPProducerInternetServer.exe in Ricoh MarcomCentral, formerly PTI Marketing, FusionPro VDP before 10.0 allows a remote attacker to list or enumerate sensitive contents of files. Furthermore, this could allow for privilege escalation ...

CVE-2019-7751

CVE-2019-7751 affects Ricoh MarcomCentral’s FusionPro VDP Creator (FPProducerInternetServer.exe) prior to version 10.0. The root cause is a directory traversal/local file inclusion allowing a remote attacker to list sensitive files and potentially escalate privileges by dumping SAM and SYSTEM dat...

CVE-2019-7751: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal and local file inclusion vulnerability in FPProducerInternetServer.exe in Ricoh MarcomCentral, formerly PTI Marketing, FusionPro VDP before 10.0 allows a remote attacker to list or enumerate sensitive contents of files. Furthermore, this could allow for privilege escalation ...

PT-2019-18743

Name of the Vulnerable Software and Affected Versions Ricoh MarcomCentral, formerly PTI Marketing, FusionPro VDP versions prior to 10.0 Description A directory traversal and local file inclusion issue allows a remote attacker to list or enumerate sensitive contents of files. This could potentiall...

MarcomCentral FusionPro VDP Creator Path Traversal Vulnerability

MarcomCentral FusionPro VDP Creator is a variable data publishing design and layout tool from MarcomCentral USA. A directory traversal vulnerability exists in the FPProducerInternetServer.exe service/utility in MarcomCentral FusionPro VDP Creator versions prior to 10.0. A remote attacker could us...

MarcomCentral FusionPro VDP Creator Directory Traversal

!/usr/bin/env python ''' Exploit Title: MarcomCentral FusionPro VDP Creator :/Windows/System32/drivers/etc/hosts. No slash-dot-dots /../.. are required, but you can add some if you want. Note that the slashes are forward slashes! By default, the service sets up a listener on port 8080. Vendor...