https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 05:08:17 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-09060 cnvd-2018-09060 https://cve.radiocsirt.org/vuln/cnvd-2018-09060 https://cve.radiocsirt.org/vuln/euvd-2026-63312 EUVD-2026-63312 https://cve.radiocsirt.org/vuln/euvd-2026-63312 https://cve.radiocsirt.org/vuln/fkie_cve-2018-7669 <p>An issue was discovered in Sitecore Sitecore.NET 8.1 rev. 151207 Hotfix 141178-1 and above. The &#39;Log Viewer&#39; application is vulnerable to a directory traversal attack, allowing an attacker to access arbitrary files from the host Operating System using a sitecore/shell/default.aspx?xmlcontrol=LogViewerDetails&amp;file= URI. Validation is performed to ensure that the text passed to the &#39;file&#39; parameter correlates to the correct log file directory. This filter can be bypassed by including a valid log filename and then appending a traditional &#39;dot dot&#39; style attack.</p> <p>An issue was discovered in Sitecore Sitecore.NET 8.1 rev. 151207 Hotfix 141178-1 and above. The &#39;Log Viewer&#39; application is vulnerable to a directory traversal attack, allowing an attacker to access arbitrary files from the host Operating System using a sitecore/shell/default.aspx?xmlcontrol=LogViewerDetails&amp;file= URI. Validation is performed to ensure that the text passed to the &#39;file&#39; parameter correlates to the correct log file directory. This filter can be bypassed by including a valid log filename and then appending a traditional &#39;dot dot&#39; style attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-7669 https://cve.radiocsirt.org/vuln/ghsa-64jx-9399-hqjr <p>An issue was discovered in Sitecore Sitecore.NET 8.1 rev. 151207 Hotfix 141178-1 and above. The &#39;Log Viewer&#39; application is vulnerable to a directory traversal attack, allowing an attacker to access arbitrary files from the host Operating System using a sitecore/shell/default.aspx?xmlcontrol=LogViewerDetails&amp;file= URI. Validation is performed to ensure that the text passed to the &#39;file&#39; parameter correlates to the correct log file directory. This filter can be bypassed by including a valid log filename and then appending a traditional &#39;dot dot&#39; style attack.</p> <p>An issue was discovered in Sitecore Sitecore.NET 8.1 rev. 151207 Hotfix 141178-1 and above. The &#39;Log Viewer&#39; application is vulnerable to a directory traversal attack, allowing an attacker to access arbitrary files from the host Operating System using a sitecore/shell/default.aspx?xmlcontrol=LogViewerDetails&amp;file= URI. Validation is performed to ensure that the text passed to the &#39;file&#39; parameter correlates to the correct log file directory. This filter can be bypassed by including a valid log filename and then appending a traditional &#39;dot dot&#39; style attack.</p> https://cve.radiocsirt.org/vuln/ghsa-64jx-9399-hqjr https://cve.radiocsirt.org/vuln/gsd-2018-7669 gsd-2018-7669 https://cve.radiocsirt.org/vuln/gsd-2018-7669