ETouch Systems SamePage Enterprise Edition Directory Traversal Vulnerability

ETouch Systems SamePage Enterprise Edition is an enterprise version of the Wiki WiKi solution for wikis and blogs from ETouch Systems, USA. The solution supports team collaboration, role management and document management. A directory traversal vulnerability exists in the cm/newui/blog/export.jsp...

CVE-2015-2071

Directory traversal vulnerability in cm/newui/blog/export.jsp in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows remote authenticated users to read arbitrary files via a .. dot dot in the filepath parameter...

Directory traversal

Directory traversal vulnerability in cm/newui/blog/export.jsp in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows remote authenticated users to read arbitrary files via a .. dot dot in the filepath parameter...

CVE-2015-2071: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in cm/newui/blog/export.jsp in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows remote authenticated users to read arbitrary files via a .. dot dot in the filepath parameter...

PT-2015-5583

Name of the Vulnerable Software and Affected Versions eTouch SamePage Enterprise Edition version 4.4.0.0.239 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the catId parameter to the "cm/blogrss/feed" API endpoint. Recommendations For version...

CVE-2015-2070: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows remote attackers to execute arbitrary SQL commands via the catId parameter to cm/blogrss/feed...

PT-2015-5584

Name of the Vulnerable Software and Affected Versions eTouch SamePage Enterprise Edition version 4.4.0.0.239 Description A directory traversal issue exists, allowing remote authenticated users to read arbitrary files. This is achieved by using a .. dot dot in the filepath parameter of the...