https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 26 Oct 2026 04:35:56 +0000 https://db.gcve.eu/vuln/cve-2018-25438 <p><strong>Affected:</strong> Intermesh Group-Office</p> <p>Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files by manipulating the &#39;file&#39; parameter. Attackers can send GET requests to /compress.php with &#39;../&#39; sequences in the &#39;file&#39; parameter, which is appended to the cache path and passed to readfile(), to read files such as /etc/passwd. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-21.</p> <p><strong>Affected:</strong> Intermesh Group-Office</p> <p>Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files by manipulating the &#39;file&#39; parameter. Attackers can send GET requests to /compress.php with &#39;../&#39; sequences in the &#39;file&#39; parameter, which is appended to the cache path and passed to readfile(), to read files such as /etc/passwd. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-21.</p> https://db.gcve.eu/vuln/cve-2018-25438