Directory traversal

A Directory Traversal issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make HTTP GET requests to a certain URL and obtain information about what files and directories reside on the server...

CVE-2020-11596

A Directory Traversal issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make HTTP GET requests to a certain URL and obtain information about what files and directories reside on the server...

CVE-2020-11547

PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server itself CPU usage, memory, Windows version, and internal statistics via an HTTP request, as demonstrated by type=probes to login.htm or index.htm...

CVE-2020-11547

CVE-2020-11547 affects Paessler PRTG Network Monitor prior to 20.1.57.1745. The vulnerability is an information-disclosure flaw that allows remote unauthenticated attackers to retrieve details about probes running or the server (CPU usage, memory, Windows version, internal statistics) via HTTP re...

CVE-2020-11547

PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server itself CPU usage, memory, Windows version, and internal statistics via an HTTP request, as demonstrated by type=probes to login.htm or index.htm...

File Containment Vulnerability in the Backend of the Most Earth Group Buying System

The most earth group-buying system is the most professional and powerful GroupOn mode of free open source group-buying system platform. The most earth group purchase system backend file contains a vulnerability that can be exploited by attackers to obtain server information...

File Upload Vulnerability in YouDianCMS v8.0 Backend

Youdiancms Enterprise Website Management System is an enterprise website building system developed by Changsha Youdian Software Technology Co. YouDianCMS v8.0 has a file upload vulnerability, which can be exploited by an attacker to directly obtain server information, permissions, and so on...

Alibaba BBP: SSRF / Arbitrary File Read on Alibaba Cloud Academy

Summary: Alibaba Cloud Academy certificate download function is vulnerable with SSRF bug. It can also read arbitrary file on the server. Steps To Reproduce: - Login to your https://edu.alibabacloud.com/ account - Click the url to Ping external...

EUVD-2019-4123

An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive information from heap memory, such as information associated with other users' sessions or non-Squid processes...

CVE-2020-2694

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 8.0.18 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server...

File Upload Vulnerability in hybbs v2.3.2

HYBBS is a PHP website program that supports plugin extensions and template extensions. hybbs v2.3.2 has a file upload vulnerability that can be exploited by attackers to obtain web server information and privileges...

File Upload Vulnerability in vaethink v1.0.1

vaeThink pronounced:v think is a lightweight, high speed PHP content management framework built on ThinkPHP backend and Layui frontend ui. vaethink v1.0.1 has a file upload vulnerability that can be exploited by attackers to gain access to server information and permissions...

File Upload Vulnerability in LeShangShang Mall Open Source System

Good user experience, good stability, scalability and security, can provide mall construction solutions for small and medium-sized sites. Le Shang Mall open source system file upload vulnerability , attackers can use the vulnerability to obtain server information and control permissions...

File Upload Vulnerability in LeShangShang Mall Open Source System

Good user experience, good stability, scalability and security, can provide mall construction solutions for small and medium-sized sites. Le Shang Mall open source system file upload vulnerability , attackers can use the vulnerability to obtain server information and control permissions...

File Upload Vulnerability in LeShangShang Mall Open Source System

Good user experience, good stability, scalability and security, can provide mall construction solutions for small and medium-sized sites. Le Shang Mall open source system file upload vulnerability , attackers can use the vulnerability to obtain server information and control permissions...

Command Execution Vulnerability in LJCMS

LJCMS using PHP + Mysql architecture, is a very SEO-friendly, full-featured, safe and stable, support for multi-terminal display and extremely simple to use enterprise station-building system. LJCMS command execution vulnerabilities, attackers can use the vulnerability to obtain server system...

Remote Command Execution Vulnerability in Zendo PMS

Zendo PMS is a set of project management software developed by Easoft Tianchuang in order to solve the chaotic and disorganized phenomenon that occurs in the management process of many enterprises. Zendo PMS has a remote command execution vulnerability that can be exploited by attackers to obtain...

Command Execution Vulnerability in zzcms Website Builder System

zzphp using PHP+mysql/access/sqlite free station building system , all source code open source complete , support for cell phone automatic synchronization . zzcms build website system v1.7.3 there are command execution vulnerabilities , attackers use vulnerabilities to obtain server information...

Code execution vulnerability in rgcms

RuiGu information management system RGCMS is a set of open source station management system , using PHP language , the system features free , extended , extremely fast security , free and open source. rgcms there are code execution vulnerabilities , attackers can exploit vulnerabilities to obtain...

CVE-2019-15032

Pydio 6.0.8 mishandles error reporting when a directory allows unauthenticated uploads, and the remote-upload option is used with the http://localhost:22 URL. The attacker can obtain sensitive information such as the name of the user who created that directory and other internal server informatio...