https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 25 Oct 2026 20:39:52 +0000 https://db.gcve.eu/vuln/fkie_cve-2018-25438 <p>Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files by manipulating the &#39;file&#39; parameter. Attackers can send GET requests to /compress.php with &#39;../&#39; sequences in the &#39;file&#39; parameter, which is appended to the cache path and passed to readfile(), to read files such as /etc/passwd. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-21.</p> <p>Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files by manipulating the &#39;file&#39; parameter. Attackers can send GET requests to /compress.php with &#39;../&#39; sequences in the &#39;file&#39; parameter, which is appended to the cache path and passed to readfile(), to read files such as /etc/passwd. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-21.</p> https://db.gcve.eu/vuln/fkie_cve-2018-25438 https://db.gcve.eu/vuln/ghsa-vvmf-fxj8-j775 <p>Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files by manipulating the &#39;file&#39; parameter. Attackers can send GET requests to /compress.php with &#39;../&#39; sequences in the &#39;file&#39; parameter, which is appended to the cache path and passed to readfile(), to read files such as /etc/passwd. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-21.</p> <p>Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files by manipulating the &#39;file&#39; parameter. Attackers can send GET requests to /compress.php with &#39;../&#39; sequences in the &#39;file&#39; parameter, which is appended to the cache path and passed to readfile(), to read files such as /etc/passwd. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-21.</p> https://db.gcve.eu/vuln/ghsa-vvmf-fxj8-j775