CVE-2024-57248

The CVE-2024-57248 entry describes a Directory Traversal vulnerability in Gleamtech FileVista 9.2.0.0, occurring during the file upload process via the fileuploader.ashx path, allowing an attacker to manipulate file paths and upload malicious files, which can lead to Code Execution, Information D...

CVE-2024-57249

CVE-2024-57249 affects Gleamtech FileVista 9.2.0.0. The vulnerability is an Incorrect Access Control in the Preview function that allows remote attackers to bypass authentication by removing authentication headers (e.g., Cookie) from the request, resulting in unauthorized access to sensitive imag...

CVE-2014-8789

GleamTech FileVista prior to version 6.1 is affected by a path-traversal style issue during ZIP extraction. Remote authenticated users can craft paths inside a zip archive that are not properly handled during extraction, allowing creation of arbitrary files and potentially local code execution. I...

CVE-2014-8788

CVE-2014-8788 affects GleamTech FileVista prior to 6.1. The issue is a path leakage when saving a zip file, allowing remote authenticated users to obtain sensitive information via an error message that reveals the installation path. This is the concrete vulnerability detail documented in NVD; no ...