CVE-2008-3776

CVE-2008-3776 describes a directory traversal vulnerability in Fujitsu Web-Based Admin View 2.1.2. The issue allows an attacker to read arbitrary files by supplying a .. (dot dot) sequence in the URI, enabling partial confidentiality impact. The provided documents specify the affected product and...

CVE-2008-3776: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Fujitsu Web-Based Admin View 2.1.2 allows remote attackers to read arbitrary files via a .. dot dot in the URI...

Fujitsu Web-Based Admin View目录遍历漏洞

BUGTRAQ ID: 30780 CNCAN ID：CNCAN-2008082204 Fujitsu Web-Based Admin View不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限查看系统文件内容。 提交包含多个"../"字符作为GET请求数据，可导致绕过WEB ROOT限制，以WEB权限查看系统文件内容。 Fujitsu Web-Based Admin View 2.1.2 目前没有解决方案提供： http://www.fujitsu.com/ GET /.././.././.././.././.././.././.././.././.././etc/passw...

Fujitsu Web-Based Admin View 2.1.2 - Directory Traversal

Fujitsu Web-Based Admin View 2.1.2 - Directory Traversal source: https://www.securityfocus.com/bid/30780/info Fujitsu Web-Based Admin View is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. This issue occurs in the...

Fujitsu Web-Based Admin View 2.1.2 - Directory Traversal

source: https://www.securityfocus.com/bid/30780/info Fujitsu Web-Based Admin View is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. This issue occurs in the application's HTTP server. Exploiting this issue will allow an...

CVE-2006-3327

Cross-site scripting XSS vulnerability in Custom dating biz dating script 1.0 allows remote attackers to inject arbitrary web script or HTML via the 1 sn20specialcases parameter "Special Cases" field in profile/mini.php, 2 tyxx01albumname parameter "Album Name" field in profile/photocreate.php, a...