3 matches found
CVE-2018-16961
An issue was discovered in Open XDMoD through 7.5.0. html/gui/general/dlpublication.php allows Path traversal via the file parameter, allowing remote attackers to read PDF files in arbitrary directories...
CVE-2018-16961
An issue was discovered in Open XDMoD through 7.5.0. html/gui/general/dlpublication.php allows Path traversal via the file parameter, allowing remote attackers to read PDF files in arbitrary directories...
PT-2019-9385
Name of the Vulnerable Software and Affected Versions Open XDMoD versions prior to 7.5.0 Description An issue was discovered that allows path traversal via the file parameter in the "html/gui/general/dl publication.php" endpoint, enabling remote attackers to read PDF files in arbitrary directorie...