Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file reading via the web/polygon/problem/viewfile?id=1&name=../ substring. (CVSS:0.0) (Last Update:2019-10-13)

Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file deletion via the web/polygon/problem/deletefile?id=1&name=../ substring. (CVSS:0.0) (Last Update:2019-10-13)

IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of IceWarp Mailserver and the operating system. Input passed via a certain parameter (script to basic/minimizer/index.php) is not properly sanitised and can therefore be exploited to browse the partition where IceWarp is installed (or the whole system) and read arbitrary files. (CVSS:0.0) (Last Update:2019-10-11)

IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of IceWarp Mailserver and the operating system. Input passed via a certain parameter (_c to basic/index.html) is not properly sanitised and can therefore be exploited to browse the partition where IceWarp is installed (or the whole system) and read arbitrary files. (CVSS:0.0) (Last Update:2019-10-11)

The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter. (CVSS:0.0) (Last Update:2019-10-10)

The estrutura-basica theme through 2015-09-13 for WordPress has directory traversal via the scripts/download.php arquivo parameter. (CVSS:0.0) (Last Update:2019-10-10)

The history-collection plugin through 1.1.1 for WordPress has directory traversal via the download.php var parameter. (CVSS:0.0) (Last Update:2019-10-10)

The s3bubble-amazon-s3-html-5-video-with-adverts plugin 0.7 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path parameter. (CVSS:0.0) (Last Update:2019-10-10)