PT-2005-2726 · Oracle +1 · Javamail Api +1

Name of the Vulnerable Software and Affected Versions: JavaMail API versions 1.1.3 through 1.3 Description: The issue allows remote attackers to read arbitrary files via a full pathname in the argument to the Download parameter. It is worth noting that Sun and Apache dispute this issue, with Sun...

CVE-2005-4039

CVE-2005-4039 affects the Web4Future Portal Solutions News Portal. A directory traversal flaw in arhiva.php allows remote attackers to read arbitrary files through the dir parameter. The NVD entry lists a base score of 7.8 (HIGH) with network access and low attack complexity. The connected source...

PHP/FI mylog.html/mlog.html < 3.0 Arbitrary File Read Vulnerability - Active Check

PHP/FI is prone to an arbitrary file read vulnerability. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

QWikiwiki directory traversal vulnerability

The remote host is running QWikiwiki, a Wiki application written in PHP. The remote version of this software contains a validation input flaw which may allow an attacker to use it to read arbitrary files on the remote host with the privileges of the web server. SPDX-FileCopyrightText: 2005 Noam...

ArGoSoft Mail Server < 1.8.7.0 Multiple Vulnerabilities

There are multiple flaws in ArGoSoft WebMail interface which may allow an attacker to bypass authentication, inject HTML in the e-mails read by the users and even to read arbitrary files on that server. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a...

CVE-2005-3268

yiff server yiff-server 2.14.2 on Debian GNU/Linux runs as root and does not properly verify ownership of files that it opens, which allows local users to read arbitrary files...

qnx-inputtrap.txt

rfdslabs security advisory Title: QNX inputtrap arbitrary file read vulnerability RLSA01-2005 Versions: QNX RTOS 6.3, 6.1.0 possibly others Vendor: http://www.qnx.com Date: Feb 22 2005 Author: Julio Cesar Fort 1. Introduction inputtrap is a utility designed to detect and start input manager in QN...

CVE-2001-1510

Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server JWS, and possibly other web servers allows remote attackers to read arbitrary files and directories by appending 1 "%3f.jsp", 2 "?.jsp" or 3 "?" to the requested URL...

osTicketSQL.txt

GulfTech Security Research May 2nd, 2005 Vendor : osTicket URL : http://www.osticket.com/ Version : All Versions Risk : Multiple Vulnerabilities Description: osTicket is a widely-used open source support ticket system. It is a lightweight support ticket tool written mainly using PHP scripting...

CVE-2005-1408

Apple Keynote 2.0 and 2.0.1 allows remote attackers to read arbitrary files via the keynote: URI handler in a crafted Keynote presentation...

iDEFENSE Security Advisory 05.24.05: Ipswitch IMail Web Calendaring Arbitrary File Read Vulnerability

Ipswitch IMail Web Calendaring Arbitrary File Read Vulnerability iDEFENSE Security Advisory 05.24.05 www.idefense.com/application/poi/display?id=242&type=vulnerabilities May 24, 2005 I. BACKGROUND Ipswitch Collaboration Suite ICS is a comprehensive communication and collaboration solution for...

CVE-2004-2061

RiSearch shows a vulnerability in the show.pl CGI script that allows an attacker to use the remote host as an open proxy and to read arbitrary local files by passing a url parameter with http://, ftp://, or file://. Affected software/versions include RiSearch 1.0.01 and RiSearch Pro 3.2.06. The u...

osTicket <= 1.2.7 Multiple Vulnerabilities

The version of osTicket installed on the remote host suffers from several vulnerabilities : - A Remote File Include Vulnerability The script 'include/main.php' lets an attacker read arbitrary files on the remote host and possibly even run arbitrary PHP code, subject to the privileges of the web...

CVE-2005-0976

AppleWebKit WebCore and WebKit, as used in multiple products such as Safari 1.2 and OmniGroup OmniWeb 5.1, allows remote attackers to read arbitrary files via the XMLHttpRequest Javascript component, as demonstrated using automatically mounted disk images and file:// URLs...

GLSA-200503-37 : LimeWire: Disclosure of sensitive information

The remote host is affected by the vulnerability described in GLSA-200503-37 LimeWire: Disclosure of sensitive information Two input validation errors were found in the handling of Gnutella GET requests CAN-2005-0788 and magnet requests CAN-2005-0789. Impact : A remote attacker can craft a specif...

CVE-2005-0801

CVE-2005-0801 describes a directory traversal vulnerability in the web application component includer.cgi of The Includer . The issue allows remote attackers to read arbitrary files by supplying directory traversal sequences (.. or a full pathname) in the URL, compromising confidentiality. The pr...

CVE-2004-1646

CVE-2004-1646 affects Xedus Peer-to-Peer web server (Xedus 1.0). The OpenVAS/Nessus entries describe a directory-traversal vulnerability allowing an attacker to view arbitrary files by crafting a URL containing ..; documents do not provide exploitation status. Remediation cited in the OpenVAS/Nes...

CVE-2005-0450

CVE-2005-0450 : The vulnerability affects Sami HTTP Server 1.0.5. A directory traversal flaw lets remote attackers read arbitrary files by crafting HTTP requests containing ".." sequences or their URL-encoded form "%2e%2e". The incident is documented with a NVD CVSS v2.0 base score of 5.0 (Medium...

CVE-2005-0300

Directory traversal vulnerability in session.php in JSBoard 2.0.9 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the table parameter...

Squirrelmail vacation v0.15 local root exploit

LSS Security Advisory LSS-2005-01-03 http://security.lss.hr --- Title : Squirrelmail vacation v0.15 local root exploit Advisory ID : LSS-2005-01-03 Date : 10.01.2005. Advisory URL: : http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-03 Impact : Privilege escalation and arbitrary fil...