CVE-2019-10257

Zucchetti HR Portal through 2019-03-15 allows Directory Traversal. Unauthenticated users can escape outside of the restricted location (dot-dot-slash notation) to access files or directories that are elsewhere on the system. Through this vulnerability it is possible to read the application's java sources from /WEB-INF/classes/*.class

• CWE-22

• http://www.sk-it.com/en/cve.htmlExploit, Third Party Advisory
• http://www.sk-it.com/en/cve.htmlExploit, Third Party Advisory

Published

Jun 19, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-10250UCWeb UC Browser 7.0.185.1002 on Windows uses HTTP for downl…
• CVE-2019-10251The UCWeb UC Browser application through 2019-03-26 for Andr…
• CVE-2019-10253A Cross-Site Request Forgery (CSRF) vulnerability exists in …6.5
• CVE-2019-10254In MISP before 2.4.105, the app/View/Layouts/default.ctp def…
• CVE-2019-10255An Open Redirect vulnerability for all browsers in Jupyter N…
• CVE-2019-10256An authentication bypass vulnerability in VIVOTEK IPCam vers…9.8
• CVE-2019-1026An elevation of privilege exists in Windows Audio Service. A…7.8
• CVE-2019-10260Total.js CMS 12.0.0 has XSS related to themes/admin/views/in…
• CVE-2019-10261CentOS Web Panel (CWP) 0.9.8.789 is vulnerable to Stored/Per…
• CVE-2019-10262A SQL Injection issue was discovered in BlueCMS 1.6. The var…
• CVE-2019-10263An issue was discovered in Ahsay Cloud Backup Suite before 8…
• CVE-2019-10264An issue was discovered in Ahsay Cloud Backup Suite before 8…