EUVD-2018-6481

Malware in sbrugna...

CVE-2018-14573

A Local File Inclusion LFI vulnerability exists in the Web Interface API of TightRope Media Carousel Digital Signage before 7.3.5. The RenderingFetch API allows for the downloading of arbitrary files through the use of directory traversal sequences, aka CSL-1683...

Directory traversal

A Local File Inclusion LFI vulnerability exists in the Web Interface API of TightRope Media Carousel Digital Signage before 7.3.5. The RenderingFetch API allows for the downloading of arbitrary files through the use of directory traversal sequences, aka CSL-1683...

PT-2018-12587

Name of the Vulnerable Software and Affected Versions TightRope Media Carousel Digital Signage versions prior to 7.3.5 Description A Local File Inclusion LFI issue exists in the Web Interface API, specifically affecting the RenderingFetch API. This allows for the downloading of arbitrary files...

CVE-2018-14573: Improper Limitation of a Pathname to a Restricted Directory

A Local File Inclusion LFI vulnerability exists in the Web Interface API of TightRope Media Carousel Digital Signage before 7.3.5. The RenderingFetch API allows for the downloading of arbitrary files through the use of directory traversal sequences, aka CSL-1683...