RadScripts RadBids Gold 2.0 - 'index.php?read' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/13080/info RadBids Gold is reported prone to multiple vulnerabilities. These issues include arbitrary file disclosure, cross-site scripting, and SQL injection. The following specific vulnerabilities were identified: A remote attacker can disclose arbitrar...

osCommerce file_manager.php filename Parameter Traversal Arbitrary File Access

The remote host is running osCommerce, a widely installed open source shopping e-commerce solution. The remote version of this software is vulnerable to a directory traversal flaw which may be exploited by an attacker to read arbitrary files on the remote server with the privileges of the web...

LimeWire < 4.8.0 Directory Traversal Arbitrary File Access

Binary data 2710.prm...

CVE-2005-0701: Undefined Security Weakness

Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitrary files via "\.\.." modified dot dot backslash sequences to UTLFILE functions such as 1 UTLFILE.FOPEN or 2 UTLFILE.frename...

CProxy Directory Traversal Arbitrary File Access / DoS

Binary data 2670.prm...

CVE-2004-1721

The 1 function.php or 2 function.view.php scripts in Merak Mail Server 5.2.7 allow remote attackers to read arbitrary PHP files via a direct HTTP request to port 32000...

OpenConnect WebConnect 6.46.5 - jretest.html Traversal Arbitrary File Access

OpenConnect WebConnect 6.46.5 - jretest.html Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/12613/info OpenConnect WebConnect is reported prone to multiple vulnerabilities. The following individual issues are reported: WebConnect is reported prone to a remote denial of...

Knox Arkeia Network Backup Agent Default Account

The remote host is running Arkeia Network Backup agent, used for backups of the remote host. The remote version of this agent contains a default account that may allow an attacker to gain read/write arbitrary files on the remote system with the privileges of the Arkeia daemon, usually root. C...

CVE-2004-1583

Directory traversal vulnerability in the FTP server in TriDComm 1.3 and earlier allows remote attackers to read or write arbitrary files via a .. dot dot in FTP commands such as 1 DIR, 2 GET, or 3 PUT...

CVE-2004-1601: Undefined Security Weakness

Directory traversal vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to access arbitrary files and execute local PHP scripts via a .. dot dot in the op parameter...

TrackerCam 5.12 - ComGetLogFile.php3?fm Traversal Arbitrary File Access

TrackerCam 5.12 - ComGetLogFile.php3?fm Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/12592/info TrackerCam is prone to multiple remote vulnerabilities, including buffer-overflow issues, a directory-traversal issue, an information-disclosure issue, an HTML-injection...

TrackerCam 5.12 - 'ComGetLogFile.php3?fm' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/12592/info TrackerCam is prone to multiple remote vulnerabilities, including buffer-overflow issues, a directory-traversal issue, an information-disclosure issue, an HTML-injection issue, and denial-of-service issues. A remote attacker could exploit these...

DSA-686-1 gftp - missing input sanitising

Bulletin has no description...

security flaw

Directory traversal vulnerability in the truepath function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via ".../....///" sequences, which are not properly cleansed by regular expressions that are intended to remove "../" and "./" sequences...

CVE-2005-0442

Directory traversal vulnerability in index.php for CubeCart 2.0.4 allows remote attackers to read arbitrary files via the language parameter...

CVE-2005-0367

Multiple directory traversal vulnerabilities in ArGoSoft Mail Server 1.8.7.3 allow remote authenticated users to read, delete, or upload arbitrary files via a .. dot dot in 1 the filename of an e-mail attachment, 2 the msgatt.rec file, 3 and the /msg, /delete, /folderadd, and /folderdelete...

CVE-2005-0261

lspath in AIX 5.2, 5.3, and possibly earlier versions, does not drop privileges before processing the -f option, which allows local users to read one line of arbitrary files...

RHEL 2.1 / 3 : mailman (RHSA-2005:136)

Updated mailman packages that correct a mailman security issue are now available. The mailman package is software to help manage email discussion lists. A flaw in the truepath function of Mailman was discovered. A remote attacker who is a member of a private mailman list could use a carefully...

GNU Mailman < 2.1.6 Directory Traversal Arbitrary File Access

Binary data 2607.prm...

Mailman private.py true_path Function Traversal Arbitrary File Access

According to its version number, the remote installation of Mailman reportedly is affected by a directory traversal vulnerability in 'Cgi/private.py'. The flaw comes into play only on web servers that don't strip extraneous slashes from URLs, such as Apache 1.3.x, and allows a list subscriber,...