Navigate CMS version 2.8.7 suffers from an authenticated directory traversal vulnerability.
e422428b73acd01b8faae4427b9bcb16Booked Scheduler version 2.7.7 suffers from an authenticated directory traversal vulnerability.
a4735a7d21fe839b802938d376f307c3SimplePHPGal version 0.7 suffers from a remote file inclusion vulnerability.
69eb6230d589074cf1c0543f754f010bBoltWire version 6.03 suffers from a local file inclusion vulnerability.
4592e504295e563f4cf421c3c26ba239Gigamon GigaVUE version 5.5.01.11 suffers from directory traversal and file upload with command execution vulnerabilities. Gigamon has chosen to sunset this product and not offer a patch.
0fcc796a695117342acf0f72ae2515deThis Metasploit module exploits an authenticated directory traversal vulnerability in Zen Load Balancer version 3.10.1. The flaw exists in index.cgi not properly handling the filelog= parameter which allows a malicious actor to load arbitrary file path.
098e961d63357b612d0c1f8c93294ae0QRadar Community Edition version 7.3.1.6 has a path traversal that exists in the session validation functionality. In particular, the vulnerability is present in the part that handles session tokens (UUIDs). QRadar fails to validate if the user-supplied token is in the correct format. Using path traversal it is possible for authenticated users to impersonate other users, and also to executed arbitrary code (via Java deserialization). The code will be executed with the privileges of the Tomcat system user.
6cb180e7e16b46cc6581407a5507d0a0QRadar Community Edition version 7.3.1.6 is vulnerable to instantiation of arbitrary objects based on user-supplied input. An authenticated attacker can abuse this to perform various types of attacks including server-side request forgery and (potentially) arbitrary execution of code.
f813c8f629536b1985d46109b98d02f8TVT NVMS 1000 suffers from a directory traversal vulnerability.
801d83449f54d4e39592e24a359a856dWordPress Media Library Assistant plugin version 2.81 suffers from a local file inclusion vulnerability.
b31e7279051191481d8919615b301f40Zen Load Balancer version 3.10.1 suffers from a directory traversal vulnerability. This finding was originally discovered by Cody Sixteen.
4eab1f70983bec64bb7c6a94d06cf884LimeSurvey version 4.1.11 suffers from a File Manager path traversal vulnerability.
15a17460c92285cb9514da2991c14b64Joomla Fabrik component version 3.9.11 suffers from a directory traversal vulnerability.
ca6510d47275441b8241ea7c2bb9e5e7Jinfornet Jreport version 15.6 suffers from an unauthenticated directory traversal vulnerability.
aa0b75959e528f9f28ec3bdf8df57c76FIBARO System Home Center version 5.021 suffers from cross site scripting and remote file inclusion vulnerabilities.
3f7f7703a1c9d1be0e5090ceeb7c714cPHPKB Multi-Language 9 suffers from an authenticated directory traversal vulnerability.
aba62435c30641b2f7f83973ae012c79Horde Groupware Webmail Edition version 5.2.22 suffers from a PHP file inclusion vulnerability.
d2b595c8544f4d3d4cd3488e79c4933dApache Tomcat AJP Ghostcat file read and inclusion exploit.
28027f46fb9f230fd41b684c0e835073DotNetNuke CMS version 9.4.4 suffers from zip split issue where a directory traversal attack can be performed to overwrite files or execute malicious code.
d32b92cc83fb3c3e8afcae4b8b377775SmartClient version 120 suffers from information disclosure, local file inclusion, remote file upload, and XML external entity injection vulnerabilities.
57f8471ef038330e69a08ce5bd6f84a5SuiteCRM versions 7.11.11 and below suffer from an add_to_prospect_list broken access control that allows for local file inclusion attacks.
30243acc735a0a74cd60961a8b809988Lotus Core CMS version 1.0.1 suffers from a local file inclusion vulnerability.
641de06b076788171ff9f640f27f6e23Pachev FTP Server version 1.0 suffers from a path traversal vulnerability.
daf03cb0a0aca2e05e3dbccdbc4c7b07This is an nmap nse script to test for the path traversal vulnerability in Citrix Application Delivery Controller (ADC) and Gateway.
3d57f69e4e44a43b2e99e03017ca3b2fThis Metasploit module exploits a directory traversal in Huawei HG255.
16cb3c95e3cda16e38fc0cb442488455
© 2020 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed