CVE-2015-0867

Directory traversal vulnerability in SYNCK GRAPHICA Download Log CGI 3.0 and earlier allows remote attackers to read arbitrary files via a crafted filename.

• CWE-22

• http://jvn.jp/en/jp/JVN88559134/index.htmlVendor Advisory
• http://jvndb.jvn.jp/jvndb/JVNDB-2015-000006Vendor Advisory
• http://www.synck.com/blogs/news/weblog_1420694040.htmlVendor Advisory
• http://jvn.jp/en/jp/JVN88559134/index.htmlVendor Advisory
• http://jvndb.jvn.jp/jvndb/JVNDB-2015-000006Vendor Advisory
• http://www.synck.com/blogs/news/weblog_1420694040.htmlVendor Advisory

Published

Jan 21, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-0860Off-by-one error in the extracthalf function in dpkg-deb/ext…
• CVE-2015-0861model/modelstorage.py in trytond 3.2.x before 3.2.10, 3.4.x …
• CVE-2015-0862Multiple cross-site scripting (XSS) vulnerabilities in the m…
• CVE-2015-0863GALAXY Apps (aka Samsung Apps, Samsung Updates, or com.sec.a…
• CVE-2015-0864Samsung Account (AKA com.osp.app.signin) before 1.6.0069 and…
• CVE-2015-0866Multiple cross-site scripting (XSS) vulnerabilities in Zoho …
• CVE-2015-0868Unrestricted file upload vulnerability in Mrs. Shiromuku Per…
• CVE-2015-0869I-O DATA DEVICE NP-BBRM routers allow remote attackers to ca…
• CVE-2015-0870Cross-site scripting (XSS) vulnerability in hb.cgi in Nishis…
• CVE-2015-0871Cross-site scripting (XSS) vulnerability in Mrs. Shiromuku P…
• CVE-2015-0872Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-0873Cross-site scripting (XSS) vulnerability in Homepage Decorat…