Vulnerabilities (CVE)

Filtered by vendor Cdnetworks Subscribe
Filtered by product Aquanplayer
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-7858 2 Cdnetworks, Microsoft 2 Aquanplayer, Windows 2024-02-28 5.0 MEDIUM 8.6 HIGH
There is a directory traversing vulnerability in the download page url of AquaNPlayer 2.0.0.92. The IP of the download page url is localhost and an attacker can traverse directories using "dot dot" sequences(../../) to view host file on the system. This vulnerability can cause information leakage.