Traversée de Répertoires (Directory Traversal)

Redatam7 (formerly Redatam WebServer) allows remote attackers to read arbitrary files via /redbin/rpwebutilities.exe/text?LFN=../ directory traversal. (CVSS:0.0) (Last Update:2018-06-21)

An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. The mount target path check in mounter.cpp `mpOk()` is insufficient. A regular user can consequently mount a CIFS filesystem anywhere (e.g., outside of the /home directory tree) by passing directory traversal sequences such as a home/../usr substring. (CVSS:0.0) (Last Update:2018-06-19)

An issue discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and "Arbitrary file read" vulnerability via an admin/cmsWebFile/list.html?path=../ URI. (CVSS:0.0) (Last Update:2018-06-15)

Arbitrary File Deletion exists in PHP Scripts Mall Schools Alert Management Script via the img parameter in delete_img.php by using directory traversal. (CVSS:0.0) (Last Update:2018-06-08)

An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. Arbitrary unmounts can be performed by regular users via directory traversal sequences such as a home/../sys/kernel substring. (CVSS:0.0) (Last Update:2018-06-19)

An issue discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and "Arbitrary file read" vulnerability via an admin/cmsTemplate/content.html?path=../ URI. (CVSS:0.0) (Last Update:2018-06-15)

Directory traversal issues in the D-Mod extractor in DFArc and DFArc2 (as well as in RTsoft's Dink Smallwood HD / ProtonSDK version) before 3.14 allow an attacker to overwrite arbitrary files on the user's system. (CVSS:0.0) (Last Update:2018-06-12)

Roxy Fileman through v1.4.5 has Directory traversal via the php/download.php f parameter. (CVSS:0.0) (Last Update:2018-06-07)