SolarWinds Access Rights Manager OpenClientUpdateFile Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Access Rights Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the OpenClientUpdateFile method. The issue results from the lack of...

PT-2023-11625 · Jinfornet · Jsreport

Name of the Vulnerable Software and Affected Versions: Jinfornet Jreport version 15.6 Description: A directory traversal issue allows unauthenticated attackers to gain sensitive information. Recommendations: For Jinfornet Jreport version 15.6, update to a version that fixes this issue, as no...

CVE-2022-31457

RTX TRAP v1.0 allows attackers to perform a directory traversal via a crafted request sent to the endpoint /data/...

CVE-2023-25307

nothub mrpack-install = v0.16.2 is vulnerable to Directory Traversal...

PT-2023-25323 · Safe · Fme Server +1

Name of the Vulnerable Software and Affected Versions: Safe Software FME Server versions prior to 2022.2.5 FME Flow versions prior to 2023.0 Description: A directory traversal issue allows an attacker to bypass validation when editing a network-based resource connection, resulting in unauthorized...

CVE-2022-46137

AeroCMS v0.0.1 is vulnerable to Directory Traversal. The impact is: obtain sensitive information remote. The component is: AeroCMS v0.0.1...

PT-2022-21382 · Unknown · Lansweeper

Name of the Vulnerable Software and Affected Versions: Lansweeper version 10.1.1.0 Description: A directory traversal issue exists in the AssetActions.aspx addDoc functionality. This can be triggered by a specially-crafted HTTP request, potentially leading to arbitrary file upload. An attacker ca...

CVE-2022-42892

A vulnerability has been identified in syngo Dynamics All versions VA40G HF01. syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow directory listing in any folder accessible to the account assigned to the website’s applicati...

gitjacker arbitrary code execution

gitjacker before 0.1.0 allows remote attackers to execute arbitrary code via a crafted .git directory because of directory traversal...

Directory traversal

ftcms =2.1 was discovered to be vulnerable to directory traversal attacks via the parameter tp...

Directory Traversal

github.com/flipped-aurora/gin-vue-admin is vulnerable to directory traversal. The vulnerability exists due to a lack of sanitization of FileName allowing an attacker to gain access to restricted files...

PT-2022-17760 · Onenav · Onenav

Name of the Vulnerable Software and Affected Versions: OneNav version 0.9.14 Description: An issue in the index.php file allows attackers to perform directory traversal. Recommendations: For OneNav version 0.9.14, update to a version that fixes the issue in index.php to prevent directory traversa...

CVE-2021-44977

In iCMS =8.0.0, a directory traversal vulnerability allows an attacker to read arbitrary files...

PT-2021-14826 · Lantronix · Lantronix Premierwave 2050

Name of the Vulnerable Software and Affected Versions: Lantronix PremierWave 2050 version 8.9.0.0R4 Description: A directory traversal issue exists in the Web Manager FsBrowseClean functionality, allowing an attacker to make a specially crafted HTTP request that can lead to arbitrary file deletio...

CVE-2021-23797

All versions of package http-server-node are vulnerable to Directory Traversal via use of --path-as-is...

CVE-2021-40886

Projectsend version r1295 is affected by a directory traversal vulnerability. A user with Uploader role can add value 2 for chunks parameter to bypass fileName sanitization...

CVE-2021-40886

Projectsend version r1295 is affected by a directory traversal vulnerability. A user with Uploader role can add value 2 for chunks parameter to bypass fileName sanitization...

phpcms directory traversal vulnerability

phpcms is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information, products and so on. A path traversal vulnerability exists in phpcms version 9.1.13. An attacker can exploit this vulnerability to perform...

BloofoxCMS Path Traversal Vulnerability

bloofoxCMS is a free open source PHP + MySQL based Web content management system . A directory traversal vulnerability exists in BloofoxCMS version 0.5.2.1. An attacker can exploit this vulnerability by inserting the '... /' payload into the 'fileurl' parameter to achieve directory traversal...

FusionPBX Directory Traversal Vulnerability

FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A security vulnerability exists in FusionPBX 4.5.7 that allows a remote malicious user to...