CVE-2005-0253

CVE-2005-0253 affects BibORB, specifically 1.3.2 and earlier. A directory traversal flaw in index.php (database_name parameter) allows remote attackers with Delete action rights to delete arbitrary files on the host where BibORB runs. Related disclosures (Full-Disclosure advisory, PacketStorm not...

CVE-2005-0253

Directory traversal vulnerability in index.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers to delete arbitrary files via a Delete action and .. dot dot sequences in the databasename parameter...

CVE-2004-0253

IBM Cloudscape 5.1 running jdk 1.4.203 allows remote attackers to execute arbitrary programs or cause a denial of service via certain SQL code, possibly due to a SQL injection vulnerability...

CVE-2004-0253

IBM Cloudscape 5.1 running jdk 1.4.203 allows remote attackers to execute arbitrary programs or cause a denial of service via certain SQL code, possibly due to a SQL injection vulnerability...

CVE-2003-0253

The prefork MPM in Apache 2 before 2.0.47 does not properly handle certain errors from accept, which could lead to a denial of service...

CVE-2003-0253

CVE-2003-0253 affects Apache 2.x with the prefork MPM before 2.0.47. A bug in handling accept() errors on rarely accessed ports could cause a temporary denial of service. The available connected documents consistently describe this as a DoS issue tied to the prefork MPM; remediation involves upgr...

Hyperseek 2000 hsx.cgi does not adequately filter user input disclosing directory listings and file contents

Overview iWeb Systems Hyperseek search engine may allow malformed URL requests to access files outside the document root of a vulnerable system. Description A specially crafted URL can disclose the directory listing and files of the target system with read permissions. --- Impact Remote attackers...

CVE-2002-0253

PHP, when not configured with the "displayerrors = Off" setting in php.ini, allows remote attackers to obtain the physical path for an include file via a trailing slash in a request to a directly accessible PHP program, which modifies the base path, causes the include directive to fail, and...

CVE-2002-0253

PHP, when not configured with the "displayerrors = Off" setting in php.ini, allows remote attackers to obtain the physical path for an include file via a trailing slash in a request to a directly accessible PHP program, which modifies the base path, causes the include directive to fail, and...

CVE-2002-0253

CVE-2002-0253 affects PHP: when display_errors is not Off in php.ini, remote attackers can cause a PHP program to disclose the physical path of an include file by exploiting a trailing slash, as the base path is altered and the include directive fails, leaking the path in the error message. Remed...

CVE-2001-0253

Directory traversal vulnerability in hsx.cgi program in iWeb Hyperseek 2000 allows remote attackers to read arbitrary files and directories via a .. dot dot attack in the show parameter...

CVE-2001-0253

Directory traversal vulnerability in hsx.cgi program in iWeb Hyperseek 2000 allows remote attackers to read arbitrary files and directories via a .. dot dot attack in the show parameter...

CVE-2001-0253

CVE-2001-0253 : A directory traversal vulnerability exists in the iWeb Hyperseek 2000 hsx.cgi show parameter, allowing remote attackers to read arbitrary files and directories via a .. path. The affected component is the hsx.cgi CGI in iWeb Hyperseek 2000. The underlying issue is insufficient inp...

CVE-2000-0253

CVE-2000-0253 affects the Dansie Shopping Cart, specifically the cart.pl component, where remote attackers can modify sensitive purchase information through hidden form fields. The CVSSv2 vector (AV:N/AC:L/Au:N/C:C/I:C/A:C) yields a base score of 10.0 (HIGH), indicating complete confidentiality, ...

CVE-2000-0253

The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields...

Microsoft IIS/PWS %2e Request ASP Source Disclosure

It is possible to get the source code of a remote ASP script by appending '%2e' to the end of the request. ASP source code usually contains sensitive information such as logins and passwords. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10363; scriptversion "1.35";...

CVE-1999-0253

IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . dot in the URL...

CVE-1999-0253

IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . dot in the URL...