CVE-2020-15124

In Goobi Viewer Core before version 4.8.3, a path traversal vulnerability allows for remote attackers to access files on the server via the application. This is limited to files accessible to the application server user, eg. tomcat, but can potentially lead to the disclosure of sensitive...

Path traversal

In Goobi Viewer Core before version 4.8.3, a path traversal vulnerability allows for remote attackers to access files on the server via the application. This is limited to files accessible to the application server user, eg. tomcat, but can potentially lead to the disclosure of sensitive...

CVE-2020-15124 Path traversal in Goobi viewer Core

In Goobi Viewer Core before version 4.8.3, a path traversal vulnerability allows for remote attackers to access files on the server via the application. This is limited to files accessible to the application server user, eg. tomcat, but can potentially lead to the disclosure of sensitive...

Arbitrary File Deletion Vulnerability in MCMS

MCMS is a website building system of MINGFEI TECHNOLOGY CO. MCMS suffers from an arbitrary file deletion vulnerability. An attacker can exploit this vulnerability to delete arbitrary files from the server...

XML External Entity (XXE)

everrest-core is vulnerable to XML external entity XXE attacks. The external DTDs are not disabled by default, allowing an attacker to submit a malicious XML document to perform requests on behalf of the server or read system files...

Arbitrary File Deletion Vulnerability in Tongda CMS Blue Bilingual Corporate Website

Tongda CMS is a set of website management system specialized in building websites for small and medium-sized enterprises SMEs, which is developed by using PHP+MYSQL. Tongda CMS blue Chinese-English bilingual enterprise website has an arbitrary file deletion vulnerability that can be exploited by...

File Containment Vulnerability in MetInfo v5.0.4 of Changsha Mito Information Technology Co.

Mito enterprise building system MetInfo is a free and open source enterprise CMS. Changsha Mito Information Technology Co., Ltd MetInfo v5.0.4 version of the file contains a vulnerability that can be exploited by attackers to view sensitive server files...

Arbitrary File Deletion Vulnerability in Monstra CMS

Monstra is a modern and lightweight content management system. Monstra CMS suffers from an arbitrary file deletion vulnerability that can be exploited by an attacker to delete files under the server...

Catalog Traversal Vulnerability in the Electricity Cloud Platform of Ankorui Electric Co.

Anchorui Electric Co., Ltd Smart Electricity Cloud Platform is a set of electrical fire early warning and prevention management system developed for the frequent occurrence of electrical fires. A directory traversal vulnerability exists in the Ankrui Electric Company Limited Intelligent Electrici...

Arbitrary File Deletion Vulnerability in Yunye CMS

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. Yunye CMS has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete any file on the server...

Arbitrary File Deletion Vulnerability in Aptar CMS (CNVD-2020-32581)

Aptar CMS website management system is developed with PHP+MYSQL technology and MVC model, with a clear structure and easy-to-maintain code. Aptar CMS has an arbitrary file deletion vulnerability that can be exploited by attackers to delete server files...

Arbitrary File Download Vulnerability in Kaiping Lianke Network Technology Co.

Kaiping Lianke Network was founded in 2005, is a main website construction, website promotion, speedy software, bathroom ERP management software, micro letter marketing company. Kaiping City, Lianke Network Technology Co., Ltd. station-building system exists arbitrary file download vulnerability,...

CVE-2019-20390

A Cross-Site Request Forgery CSRF vulnerability was discovered in Subrion CMS 4.2.1 that allows a remote attacker to remove files on the server without a victim's knowledge, by enticing an authenticated user to visit an attacker's web page. The application fails to validate the CSRF token for a G...

Arbitrary File Deletion Vulnerability in Haiwell's Cloud Configuration Software Cloud SCADA

Haiwell Haiwell cloud configuration software Cloud SCADA is an industrial automation monitoring and management platform software developed by Xiamen Haiwell Technology Co. Haiwell Haiwei Cloud SCADA configuration software Cloud SCADA arbitrary file deletion vulnerability, an attacker can exploit...

SSYCMS UGC Contributor Edition suffers from arbitrary file read vulnerability

SSYCMS is a free and open source commercial content management system. SSYCMS UGC Submission Edition suffers from an arbitrary file read vulnerability, which can be exploited by an attacker to arbitrarily read server files...

Arbitrary File Deletion Vulnerability in Five Fingers CMS

Five Fingers CMS is an open source content management system. Five Fingers CMS has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary server files...

Arbitrary File Deletion Vulnerability in WeCenter Learning Free Edition

WeCenter is an open source knowledge-based social Q&A community program. An arbitrary file deletion vulnerability exists in the free version of WeCenter Learning, which can be exploited by an attacker to delete arbitrary files from the server...

Arbitrary File Deletion Vulnerability in Advantech WebAccess/SCADA

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. An arbitrary file deletion vulnerability exists in Advantech WebAccess/SCADA, which can be exploited by an attacker to delete arbitrary files from the server...

Advantech WebAccess/SCADA suffers from arbitrary file deletion vulnerability (CNVD-2020-29403)

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. An arbitrary file deletion vulnerability exists in Advantech WebAccess/SCADA, which can be exploited by an attacker to delete arbitrary files from the server...

Flux-Keylogger - Modern Javascript Keylogger With Web Panel

Modern javascript keylogger with web panel Web panel: Logging: Keylogger Cookies Location Remote IP User-Agents Installation server files: Upload files from server directory to you server Change default username, password in flux.php Go to http://you.host/flux.php Click build Now inject script ta...