CloudMap 漏洞情报库

高危CVE-2024-452412024/08/09

CentralSquare CryWolf - Path Traversal

A traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf (False Alarm Management) through 2024-08-09 allows unauthenticated attackers to read files outside of the working web directory via the rpt parameter, leading to the disclosure of sensitive information.

crywolfPoC 已收录

CVSS7.5EPSS 89.1%

中危CVE-2019-67992019/01/26

phpMyAdmin <4.8.5 - Local File Inclusion

An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access. This is related to the mysql.allow_local_infile PHP configuration, and the inadvertent ignoring of "options(MYSQLI_OPT_LOCAL_INFILE" calls.

phpMyAdmin turbo_website_reviewer easyspiderPoC 已收录

CVSS5.9EPSS 70.7%

crywolf

关联漏洞

CentralSquare CryWolf - Path Traversal

phpMyAdmin <4.8.5 - Local File Inclusion