Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

CVEs (10,872)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-5283 1Photos In Wifi Project 1Photos In Wifi Nov 21, 2024 Jan 8, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The Photos in Wifi application 1.0.1 for iOS has directory traversal via the ext parameter to assets-library://asset/asset.php.
CVE-2018-5291 1Gd Rating System Project 1Gd Rating System Nov 21, 2024 Jan 8, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-tools page.
CVE-2018-5290 1Gd Rating System Project 1Gd Rating System Nov 21, 2024 Jan 8, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-transfer page.
CVE-2018-5289 1Gd Rating System Project 1Gd Rating System Nov 21, 2024 Jan 8, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-information page.
CVE-2018-5287 1Gd Rating System Project 1Gd Rating System Nov 21, 2024 Jan 8, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-about page.
CVE-2017-15550 1Emc 3Avamar Server Integrated Data Protection ApplianceNetworker Nov 21, 2024 Jan 5, 2018 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote authenticated malicious...Show more An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote authenticated malicious user with low privileges could access arbitrary files on the server file system in the context of the running vulnerable application via Path traversal.Show less
CVE-2017-16720 1Advantech 1Webaccess Nov 21, 2024 Jan 5, 2018 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. An attacker has access to files within the directory structure of the target device.
CVE-2017-1000472 2Debian Pocoproject 2Debian Linux Poco Nov 21, 2024 Jan 3, 2018 N/A· v4 6.5 MEDIUM· v3 5.8 MEDIUM· v2 The ZipCommon::isValidPath() function in Zip/src/ZipCommon.cpp in POCO C++ Libraries before 1.8 does not properly restrict the filename value in the ZIP header, which allows attackers to conduct absolute path traversal a...Show more The ZipCommon::isValidPath() function in Zip/src/ZipCommon.cpp in POCO C++ Libraries before 1.8 does not properly restrict the filename value in the ZIP header, which allows attackers to conduct absolute path traversal attacks during the ZIP decompression, and possibly create or overwrite arbitrary files, via a crafted ZIP file, related to a "file path injection vulnerability".Show less
CVE-2017-1000490 2Acquia Mautic 2Mautic Mautic Nov 21, 2024 Jan 3, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Mautic versions 1.0.0 - 2.11.0 are vulnerable to allowing any authorized Mautic user session (must be logged into Mautic) to use the Filemanager to download any file from the server that the web user has access to.
CVE-2017-1000501 2Awstats Debian 2Awstats Debian Linux Nov 21, 2024 Jan 3, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Awstats version 7.6 and earlier is vulnerable to a path traversal flaw in the handling of the "config" and "migrate" parameters resulting in unauthenticated remote code execution.
CVE-2017-1000448 1Structured Data 1Structured Data Linter Nov 21, 2024 Jan 2, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Structured Data Linter versions 2.4.1 and older are vulnerable to a directory traversal attack in the URL input field resulting in the possibility of disclosing information about the remote host.
CVE-2017-9965 1Schneider Electric 1Pelco Videoxpert Nov 21, 2024 Jan 2, 2018 N/A· v4 5.8 MEDIUM· v3 5.0 MEDIUM· v2 An exposure of sensitive information vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. Using a directory traversal attack, an unauthorized person can view web server files.
CVE-2017-9964 1Schneider Electric 1Pelco Videoxpert Nov 21, 2024 Jan 2, 2018 N/A· v4 6.9 MEDIUM· v3 5.8 MEDIUM· v2 A Path Traversal issue was discovered in Schneider Electric Pelco VideoXpert Enterprise all versions prior to 2.1. By sniffing communications, an unauthorized person can execute a directory traversal attack resulting in...Show more A Path Traversal issue was discovered in Schneider Electric Pelco VideoXpert Enterprise all versions prior to 2.1. By sniffing communications, an unauthorized person can execute a directory traversal attack resulting in authentication bypass or session hijack.Show less
CVE-2017-17992 1Iwcnetwork 1Biometric Shift Employee Management System May 13, 2026 Dec 30, 2017 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 Biometric Shift Employee Management System allows Arbitrary File Download via directory traversal sequences in the index.php form_file_name parameter in a download_form action.
CVE-2015-7669 1Easy2map 1Easy2map May 13, 2026 Dec 27, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Multiple directory traversal vulnerabilities in (1) includes/MapImportCSV2.php and (2) includes/MapImportCSV.php in the Easy2Map plugin before 1.3.0 for WordPress allow remote attackers to include and execute arbitrary f...Show more Multiple directory traversal vulnerabilities in (1) includes/MapImportCSV2.php and (2) includes/MapImportCSV.php in the Easy2Map plugin before 1.3.0 for WordPress allow remote attackers to include and execute arbitrary files via the csvfile parameter related to "upload file functionality."Show less
CVE-2017-17927 1Ordermanagementscript 1Professional Service Script May 13, 2026 Dec 27, 2017 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via a crafted PATH_INFO to service-list/category/.
CVE-2017-17924 1Ordermanagementscript 1Professional Service Script May 13, 2026 Dec 27, 2017 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via the id parameter to admin/review_userwise.php.
CVE-2017-15309 1Huawei 1Ireader May 13, 2026 Dec 22, 2017 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 Huawei iReader app before 8.0.2.301 has a path traversal vulnerability due to insufficient validation on file storage paths. An attacker can exploit this vulnerability to store downloaded malicious files in an arbitrary...Show more Huawei iReader app before 8.0.2.301 has a path traversal vulnerability due to insufficient validation on file storage paths. An attacker can exploit this vulnerability to store downloaded malicious files in an arbitrary directory.Show less
CVE-2017-10907 1Spiqe 1Onethird Cms Show Off May 13, 2026 Dec 22, 2017 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 Directory traversal vulnerability in OneThird CMS Show Off v1.85 and earlier. Show Off v1.85 en and earlier allows an attacker to read arbitrary files via unspecified vectors.
CVE-2017-5261 1Cambiumnetworks 5Cnpilot E400 Firmware Cnpilot E410 FirmwareCnpilot E600 Firmware+2 more May 13, 2026 Dec 20, 2017 N/A· v4 8.8 HIGH· v3 4.0 MEDIUM· v2 In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web administrative console expose a file path traversal vulnerability, accessible to all authenticated use...Show more In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web administrative console expose a file path traversal vulnerability, accessible to all authenticated users.Show less

Previous 1...432433434...544 Next