CVE-2007-3936

CVE-2007-3936 describes a directory traversal vulnerability in admin/filebrowser.asp of the A-shop software, affecting version 0.70 and earlier, and possibly 0.71. The issue allows remote attackers to delete arbitrary files via unspecified filename references in the delfiles parameter. The connec...

Ipswitch IMail Server < 2006.2 Multiple Overflows

Binary data 3936.prm...

CVE-2006-3936

Alkacon OpenCms is affected by a JSP source disclosure in system/workplace/editors/editor.jsp prior to version 6.2.2. The vulnerability allows an authenticated user to read the source code of arbitrary JSP files by supplying the file path via the resource parameter (demonstrated with index.jsp). ...