CVE-2018-15540

Agentejo Cockpit performs actions on files without appropriate validation and therefore allows an attacker to traverse the file system to unintended locations and/or access arbitrary files, aka /media/api Directory Traversal.

• CWE-22

• http://seclists.org/fulldisclosure/2018/Oct/30Exploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2018/Oct/30Exploit, Mailing List, Third Party Advisory

Published

Oct 15, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-15535/filemanager/ajax_calls.php in tecrail Responsive FileManage…
• CVE-2018-15536/filemanager/ajax_calls.php in tecrail Responsive FileManage…
• CVE-2018-15537Unrestricted file upload (with remote code execution) in OCS…
• CVE-2018-15538Agentejo Cockpit has multiple Cross-Site Scripting vulnerabi…
• CVE-2018-15539Agentejo Cockpit lacks an anti-CSRF protection mechanism. Th…
• CVE-2018-1554IBM Maximo Asset Management 7.6 is vulnerable to cross-site …5.4
• CVE-2018-15542An issue was discovered in the org.telegram.messenger applic…
• CVE-2018-15543An issue was discovered in the org.telegram.messenger applic…
• CVE-2018-15546Accusoft PrizmDoc version 13.3 and earlier contains a Stored…
• CVE-2018-1555IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to…5.4
• CVE-2018-15552The "PayWinner" function of a simplelottery smart contract i…7.5
• CVE-2018-15553fileshare.cmd on Telus Actiontec T2200H T2200H-31.128L.03 de…