HIGH🇵🇱 Wersja polska

CVE-2018-16961

CVSS 7.5v3.0pub. 2019-05-02upd. 2024-11-21

An issue was discovered in Open XDMoD through 7.5.0. html/gui/general/dl_publication.php allows Path traversal via the file parameter, allowing remote attackers to read PDF files in arbitrary directories.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Buffalo Open Xdmod

    APP
    Buffalo
    ≤ 7.5.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Path Traversal
CWE
References

Related vulnerabilities

CVE-2026-45777CRITICAL9.3PL ✓ten sam produkt

RCE poprzez command injection w Open XDMoD (wersje 9.5.0–11.0.2)

CVE-2026-45779CRITICAL9.3PL ✓ten sam produkt

SQL Injection w Open XDMoD — nieuwierzytelniony dostęp do bazy danych

CVE-2018-16988CRITICAL9.8ten sam produkt

An issue was discovered in Open XDMoD through 7.5.0. An authentication bypass (account takeover) exists due to...

CVE-2026-45778HIGH8.6ten sam produkt

OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Prior to version 11.0.3, an authentic...

CVE-2026-45776MEDIUM5.3ten sam produkt

OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Prior to version 11.0.3, a flaw in Op...