CVE-2008-6528

NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to the URL, which accesses the alternate data stream...

CVE-2008-6528

CVE-2008-6528 affects NTFS on TmaxSoft JEUS 5 before Fix 26. The vulnerability allows remote attackers to read the source code of scripts by appending ::$DATA to the URL, which accesses the NTFS alternate data stream. This exposure could disclose script source contents. The NVD entry lists a CVSS...

Input validation

Incomplete blacklist vulnerability in the filemanager in Frederico Caldeira Knabben FCKeditor 2.4.2 allows remote attackers to upload arbitrary .php files via an alternate data stream syntax, as demonstrated by .php::$DATA filenames, a related issue to CVE-2006-0658...

CVE-2007-3163

Incomplete blacklist vulnerability in the filemanager in Frederico Caldeira Knabben FCKeditor 2.4.2 allows remote attackers to upload arbitrary .php files via an alternate data stream syntax, as demonstrated by .php::$DATA filenames, a related issue to CVE-2006-0658...

CVE-2007-3163

Removed by vendor...

CVE-2006-5714

Easy File Sharing EFS Web Server 4.0, when running on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of a HTTP GET request, which accesses the alternate data stream...