SUSE CVE-2017-7433

An absolute path traversal vulnerability CWE-36 in Micro Focus Vibe 4.0.2 and earlier allows a remote authenticated attacker to download arbitrary files from the server by submitting a specially crafted request to the viewFile endpoint. Note that the attack can be performed without authentication...

CVE-2021-37442

NCH IVM Attendant v5.12 and earlier allows path traversal via viewfile?file=/.. to read files...

Path traversal

NCH IVM Attendant v5.12 and earlier allows path traversal via viewfile?file=/.. to read files...

CVE-2021-37442

NCH IVM Attendant v5.12 and earlier allows path traversal via viewfile?file=/.. to read files...

NCH IVM Attendant 路径遍历漏洞

NCH IVM Attendant is a complete voicemail, call attendant, and IVR solution for Windows.A security vulnerability in NCH IVM Attendant allows an authenticated attacker to exploit a user's access to a directory via viewfile?file=/... using directory traversal...

CVE-2019-17538

Jiangnan Online Judge aka jnoj 0.8.0 has Directory Traversal for file reading via the web/polygon/problem/viewfile?id=1&name=../ substring...

CVE-2018-20879

cPanel before 74.0.8 allows demo accounts to execute arbitrary code via the Fileman::viewfile API SEC-444...

CVE-2018-20879

cPanel before 74.0.8 allows demo accounts to execute arbitrary code via the Fileman::viewfile API SEC-444...

Code injection

cPanel before 74.0.8 allows demo accounts to execute arbitrary code via the Fileman::viewfile API SEC-444...

CVE-2018-20879

Summary: CVE-2018-20879 affects cPanel prior to 74.0.8, where demo accounts could execute arbitrary code via the Fileman::viewfile API (SEC-444). The public records indicate an unknown root cause in Fileman::viewfile that enables code execution. The NVD/CVE entries provide a CVSSv3 base score of ...

CVE-2018-20879

cPanel before 74.0.8 allows demo accounts to execute arbitrary code via the Fileman::viewfile API SEC-444...

Cross-site Scripting (XSS)

resin is vulnerable to cross-site scripting XSS attacks. The vulnerability exists through the viewfile documentation command where the value of the file parameter can be used for XSS attacks...

Path traversal

An absolute path traversal vulnerability CWE-36 in Micro Focus Vibe 4.0.2 and earlier allows a remote authenticated attacker to download arbitrary files from the server by submitting a specially crafted request to the viewFile endpoint. Note that the attack can be performed without authentication...

CVE-2017-7433

An absolute path traversal vulnerability CWE-36 in Micro Focus Vibe 4.0.2 and earlier allows a remote authenticated attacker to download arbitrary files from the server by submitting a specially crafted request to the viewFile endpoint. Note that the attack can be performed without authentication...

CVE-2017-7433

An absolute path traversal vulnerability CWE-36 in Micro Focus Vibe 4.0.2 and earlier allows a remote authenticated attacker to download arbitrary files from the server by submitting a specially crafted request to the viewFile endpoint. Note that the attack can be performed without authentication...

Turbomail turbomail. web. ViewFile parameters filename arbitrary file read vulnerability

No description provided by source...

CVE-2016-4004

Directory traversal vulnerability in Dell OpenManage Server Administrator OMSA 8.2 allows remote authenticated administrators to read arbitrary files via a ..\ dot dot backslash in the file parameter to ViewFile...

Caucho Resin 3.0.17/3.0.18 Viewfile Information Disclosure Vulnerability

No description provided by source...

XSS vulnerability in Office Connector plugin

From: OFFCONN-81: Using "office excel"-macro as part of viewfile, which is part of office connector plugin seems to open up the possibility to get injected with XSS-code. Steps to reproduce: 1. Create an excel-file with following content in one cell: code '"alert'XSS' code 2. Attach this file to ...

Viewfile macros do not respect page restrictions

Add a page Set viewing restrictions to user1 only Add an attachment - 'Sample.doc' Log in as user2 - confirm that you cannot see the restricted page Add a page, and use the viewfile macro Enter the location of the attachment on the restricted page The contents of the attachment can now be viewed ...