1102 matches found
CVE-2018-16356
An issue was discovered in PbootCMS. There is a SQL injection via the api.php/List/index order parameter...
PT-2020-7835
Name of the Vulnerable Software and Affected Versions: Etherpad versions 1.1.2 through 1.5.4 Description: A directory traversal issue allows remote attackers to read arbitrary files with the permissions of the user running the service. This is achieved by including a .. dot dot in the path...
Code injection
NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to include arbitrary files through specially crafted requests to the "diagnostic" page using the SnapMirror log path parameter...
Command injection
An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a GET request to ajaxArchiveFiles.php because the path parameter is passed to the exec function without filtering, which can lead to command execution...
CVE-2019-19509
An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a GET request to ajaxArchiveFiles.php because the path parameter is passed to the exec function without filtering, which can lead to command execution...
PT-2020-18489
Name of the Vulnerable Software and Affected Versions Gila CMS version 1.11.8 Description The issue allows for path traversal via the /admin/media endpoint. Specifically, the "path" parameter in the /admin/media?path=../ endpoint is vulnerable, allowing an attacker to traverse the directory...
CVE-2019-19509: Improper Neutralization of Special Elements used in an OS Command
An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a GET request to ajaxArchiveFiles.php because the path parameter is passed to the exec function without filtering, which can lead to command execution...
CVE-2019-17322
ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation via a POST request with the parameter set to the file path to be written. This can be an executable file that is written to in the arbitrary directory. User interaction is required to exploit this vulnerability in that...
Directory traversal
The s3bubble-amazon-s3-audio-streaming plugin 2.0 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path parameter...
PT-2019-7422
Name of the Vulnerable Software and Affected Versions s3bubble-amazon-s3-audio-streaming plugin version 2.0 Description The issue concerns directory traversal via the path parameter in the /adverts/assets/plugins/ultimate/content/downloader.php API endpoint. This allows for potential unauthorized...
SUSE-SU-2019:2227-1 Security update for libvirt
This update for libvirt fixes the following issues: Security issues fixed: - CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path parameter pointing anywhere on the system and potentially leading to execution of a malicious file with root privileges by libvirtd...
python: CRLF injection via the path part of the url passed to urlopen()
An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n specifically in the path component of a URL that...
CVE-2019-10717
BlogEngine.NET 3.3.7.0 allows /api/filemanager Directory Traversal via the path parameter...
CVE-2019-10717
BlogEngine.NET 3.3.7.0 allows /api/filemanager Directory Traversal via the path parameter...
CVE-2019-10717
BlogEngine.NET 3.3.7.0 allows /api/filemanager Directory Traversal via the path parameter...
PT-2019-12007
Name of the Vulnerable Software and Affected Versions BlogEngine.NET version 3.3.7.0 Description The issue allows for Directory Traversal via the path parameter in the "/api/filemanager" API endpoint. Recommendations For BlogEngine.NET version 3.3.7.0, avoid using the path parameter in the...
CVE-2019-10717: Improper Limitation of a Pathname to a Restricted Directory
BlogEngine.NET 3.3.7.0 allows /api/filemanager Directory Traversal via the path parameter...
SUSE-SU-2019:14097-1 Security update for libvirt
This update for libvirt fixes the following issues: Security issues fixed: - CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path parameter pointing anywhere on the system and potentially leading to execution of a malicious file with root privileges by libvirtd...