4356 matches found
CVE-2019-12215
A full path disclosure vulnerability was discovered in Matomo v3.9.1 where a user can trigger a particular error to discover the full path of Matomo on the disk, because lastError.file is used in plugins/CorePluginsAdmin/templates/safemode.twig. NOTE: the vendor disputes the significance of this...
CVE-2019-12215
A full path disclosure vulnerability was discovered in Matomo v3.9.1 where a user can trigger a particular error to discover the full path of Matomo on the disk, because lastError.file is used in plugins/CorePluginsAdmin/templates/safemode.twig. NOTE: the vendor disputes the significance of this...
Path traversal
DISPUTED A full path disclosure vulnerability was discovered in Matomo v3.9.1 where a user can trigger a particular error to discover the full path of Matomo on the disk, because lastError.file is used in plugins/CorePluginsAdmin/templates/safemode.twig. NOTE: the vendor disputes the significance...
CVE-2019-12215
CVE-2019-12215 affects Matomo v3.9.1. A user can trigger an error to disclose the full installation path because lastError.file is used in plugins/CorePluginsAdmin/templates/safemode.twig. The vendor disputes the severity of path disclosures. Reports from PT Security suggest modifying safemode.tw...
CVE-2019-12215
A full path disclosure vulnerability was discovered in Matomo v3.9.1 where a user can trigger a particular error to discover the full path of Matomo on the disk, because lastError.file is used in plugins/CorePluginsAdmin/templates/safemode.twig. NOTE: the vendor disputes the significance of this...
CVE-2019-12215
A full path disclosure vulnerability was discovered in Matomo v3.9.1 where a user can trigger a particular error to discover the full path of Matomo on the disk, because lastError.file is used in plugins/CorePluginsAdmin/templates/safemode.twig. NOTE: the vendor disputes the significance of this...
PT-2019-12702 · Matomo · Matomo
Name of the Vulnerable Software and Affected Versions: Matomo version 3.9.1 Description: A full path disclosure issue was discovered, allowing a user to trigger an error and discover the full path of Matomo on the disk. This occurs because lastError.file is used in...
Mail.ru: Full Path Disclosure
crisis.mail.ru revealed non-sensitive information, such as application installation path via error messages. crisis.mail.ru is a domain name delegated to partner service...
CVE-2019-10247
In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 404 error for not finding a Context that matches...
DoorGets Information Disclosure Vulnerability
doorGets is a content management system CMS. The system supports multiple languages, and system backups and theme changes, etc. An information disclosure vulnerability exists in the routers/ajaxRouter.php file in doorGets version 7.0, which can be exploited by an attacker to disclose the physical...
Sierra Wireless AirLink ES450 ACEManager template_load.cgi Information Disclosure Exploit
An exploitable information disclosure vulnerability exists in the ACEManager templateload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause a information leak, resulting in the disclosure of internal paths and files. An attacker can make an...
CVE-2018-20631
PHP Scripts Mall Website Seller Script 2.0.5 allows full Path Disclosure via a request for an arbitrary image URL such as a .png file...
CVE-2018-20631
PHP Scripts Mall Website Seller Script 2.0.5 allows full Path Disclosure via a request for an arbitrary image URL such as a .png file...
Path traversal
PHP Scripts Mall Website Seller Script 2.0.5 allows full Path Disclosure via a request for an arbitrary image URL such as a .png file...
CVE-2018-20631
PHP Scripts Mall Website Seller Script 2.0.5 allows full Path Disclosure via a request for an arbitrary image URL such as a .png file...
CVE-2018-20631
CVE-2018-20631 affects PHP Scripts Mall Website Seller Script 2.0.5. The vulnerability is a path disclosure issue in image URL handling (e.g., requesting arbitrary image files like .png) that may expose sensitive path information. Concrete impact details beyond information disclosure are not prov...
PT-2019-9647 · Netdata +2 · Netdata +2
Name of the Vulnerable Software and Affected Versions: Netdata version 1.10.0 Description: An issue exists in the software, potentially allowing Full Path Disclosure FPD via the "api/v1/alarms" endpoint. The vendor considers this behavior intentional. Recommendations: For Netdata version 1.10.0, ...
Unikrn: Path Disclosure Vulnerability http://crm.******.com
Hello, there is a path discovery on the server. https://crm.unikrn.com/plugins/MauticZapierBundle/MauticZapierBundle.php https://crm.unikrn.com/plugins/MauticCloudStorageBundle/MauticCloudStorageBundle.php and other scripts at https://crm.unikrn.com/plugins//.php . As an option to eliminate the...
PHP Security Check List
PHP: Hypertext Preprocessor is a web-based, server-side, multi-use, general-purpose, scripting and programming language that can be embedded in HTML. The PHP development, which was first created by Rasmus Lerdorf in 1995, is now being run by the PHP community. The PHP programming language is stil...