Lucene search
K

10 matches found

NVD
NVD
added 2025/03/06 5:15 p.m.7 views

CVE-2025-2032

A vulnerability classified as problematic was found in ChestnutCMS 1.5.2. This vulnerability affects the function renameFile of the file /cms/file/rename. The manipulation of the argument rename leads to path traversal. The exploit has been disclosed to the public and may be used...

5.1CVSS0.00082EPSS
Exploits1References4
OSV
OSV
added 2025/03/06 5:15 p.m.1 views

CVE-2025-2032

A vulnerability classified as problematic was found in ChestnutCMS 1.5.2. This vulnerability affects the function renameFile of the file /cms/file/rename. The manipulation of the argument rename leads to path traversal. The exploit has been disclosed to the public and may be used...

5.1CVSS4.9AI score0.00082EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/03/06 4:31 p.m.9 views

CVE-2025-2032 ChestnutCMS rename renameFile path traversal

A vulnerability classified as problematic was found in ChestnutCMS 1.5.2. This vulnerability affects the function renameFile of the file /cms/file/rename. The manipulation of the argument rename leads to path traversal. The exploit has been disclosed to the public and may be used...

5.1CVSS0.00082EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/03/06 4:31 p.m.4 views

CVE-2025-2032 ChestnutCMS rename renameFile path traversal

A vulnerability classified as problematic was found in ChestnutCMS 1.5.2. This vulnerability affects the function renameFile of the file /cms/file/rename. The manipulation of the argument rename leads to path traversal. The exploit has been disclosed to the public and may be used...

5.1CVSS6.9AI score0.00082EPSS
Exploits1References4
CVE
CVE
added 2025/03/06 4:31 p.m.54 views

CVE-2025-2032

CVE-2025-2032 affects ChestnutCMS 1.5.2. The vulnerability is in the function renameFile of the file /cms/file/rename, where manipulation of the argument rename leads to a path traversal flaw. Documents indicate the exploit has been disclosed publicly and may be used, but do not provide specific ...

5.1CVSS7.1AI score0.00082EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2019/12/16 5:15 p.m.3 views

CVE-2019-19731

Roxy Fileman 1.4.5 for .NET is vulnerable to path traversal. A remote attacker can write uploaded files to arbitrary locations via the RENAMEFILE action. This can be leveraged for code execution by uploading a specially crafted Windows shortcut file and writing the file to the Startup folder...

7.5CVSS6.2AI score
Exploits0References2
exploitpack
exploitpack
added 2019/12/16 12:0 a.m.54 views

Roxy Fileman 1.4.5 - Directory Traversal

Roxy Fileman 1.4.5 - Directory Traversal Exploit Title: Roxy Fileman 1.4.5 - Directory Traversal Author: Patrik Lantz Date: 2019-12-06 Software: Roxy Fileman Version: 1.4.5 Vendor Homepage: http://www.roxyfileman.com/ Software Link: http://www.roxyfileman.com/download.php?f=1.4.5-net CVE:...

5CVSS0.6AI score0.25357EPSS
Exploits5
CNVD
CNVD
added 2019/06/06 12:0 a.m.4 views

HPE Intelligent Management Center (IMC) Remote Code Execution Vulnerability (CNVD-2019-23773)

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A ConfFileResource renameFile input validation remote code execution vulnerability exists in HPE Intellige...

9CVSS8.2AI score0.03357EPSS
Exploits1References1
Check Point Advisories
Check Point Advisories
added 2015/09/30 12:0 a.m.2 views

Oracle Endeca Information Discovery Integrator ETL Server RenameFile Directory Traversal (CVE-2015-2606)

A directory traversal vulnerability exists in Oracle Endeca Information Discovery Integrator ETL Server. The vulnerability is due to insufficient input validation while processing SOAP requests to the RenameFile operation. By sending crafted SOAP requests to the target system, a remote...

7.5CVSS3.8AI score0.00724EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2015/07/20 12:0 a.m.26 views

Oracle Endeca Information Discovery Integrator ETL Server RenameFile Remote Code Execution Vulnerability

This vulnerability allows remote attackers the ability to execute arbitrary code on vulnerable instances of Oracle Endeca Information Discovery. Authentication is required to exploit this vulnerability but an authentication bypass is known. The specific flaw exists in the handling of the RenameFi...

6.5CVSS7.1AI score0.00724EPSS
Exploits0References1
Rows per page
Query Builder