PALS Library System WebPALS 1.0 - pals-cgi Traversal Arbitrary File Read

source: https://www.securityfocus.com/bid/2372/info A specially crafted URL composed of a known filename, will disclose the requested file residing on a machine running WebPALS. This vulnerability will also allow an attacker to execute arbitrary code with root privileges...

CVE-2000-0913

modrewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name contains a regular expression...

CVE-2000-1176

CVE-2000-1176 describes a directory-traversal vulnerability in YaBB’s search.pl CGI script, permitting remote attackers to read arbitrary files by abusing a .. (dot dot) input in the catsearch form field. The issue is documented for YaBB SE configurations, including references to older plugins th...

CVE-2000-1013

The CVE-2000-1013 entry describes a local file read vulnerability in setlocale affecting FreeBSD/5.0 and earlier (and possibly other OSes), where an attacker can read arbitrary files via the LANG environment variable. The NVD entry lists a base CVSS v2 score of 7.2 (HIGH) with local access, low a...

CVE-2000-1017

Webteachers Webdata allows remote attackers with valid Webdata accounts to read arbitrary files by posting a request to import the file into the WebData database...

Phorum 3.x - Arbitrary File Read

Phorum 3.x - Arbitrary File Read source: https://www.securityfocus.com/bid/1997/info Phorum is a PHP based web forums package. Due to an error in the handling of user input in administrative scripts, any user can view the any file readable by the webserver on the target host. This is due to...

Phorum 3.x - Arbitrary File Read

source: https://www.securityfocus.com/bid/1997/info Phorum is a PHP based web forums package. Due to an error in the handling of user input in administrative scripts, any user can view the any file readable by the webserver on the target host. This is due to user-supplied input being referenced a...

HP-UX 10.20 - registrar Local Arbitrary File Read

source: https://www.securityfocus.com/bid/1919/info The registrar service that ships with version 10.20 possibly others of HP's HP-UX operating system contains a vulnerability that may allow a local user to read any file on the hosts filesystem. The service which listens on tcp port 1712 writes t...

YaBB 9.1.2000 - Arbitrary File Read

YaBB 9.1.2000 - Arbitrary File Read source: https://www.securityfocus.com/bid/1668/info YaBB.pl, a web-based bulletin board script, stores board postings in numbered text files. The numbered file name is specified in the call to YaBB.pl in the variable num=. Before retrieving the file, YaBB will...

YaBB 9.1.2000 - Arbitrary File Read

source: https://www.securityfocus.com/bid/1668/info YaBB.pl, a web-based bulletin board script, stores board postings in numbered text files. The numbered file name is specified in the call to YaBB.pl in the variable num=. Before retrieving the file, YaBB will append a .txt extension to . Due to...

CVE-2000-0044

The CVE-2000-0044 entry concerns War FTP Daemon versions 1.70 and 1.67b2, where macros allow local or remote attackers to read arbitrary files or execute commands. The connected records confirm the affected product/version and the underlying impact, but they do not provide a concrete remediation ...

Stalker CommuniGate Pro 3.2.4 - Arbitrary File Read

Stalker CommuniGate Pro 3.2.4 - Arbitrary File Read source: https://www.securityfocus.com/bid/1493/info A vulnerability exists in the CommuniGate Pro product, from Stalker. It is possible to exploit this vulnerability to read arbitrary files on the filesystem. As CommuniGate Pro runs as root, any...

Sun StarOffice 5.1 - Arbitrary File Read

Sun StarOffice 5.1 - Arbitrary File Read source: https://www.securityfocus.com/bid/1040/info StarOffice is a desktop office suite offered by Sun Microsystems. StarScheduler is a groupware server that ships with StarOffice and includes a webserver that runs as root by default. When a request it se...

CVE-1999-0934

CVE-1999-0934 affects the classifieds.cgi CGI script. The vulnerability arises from insufficient input filtering, allowing remote attackers to read arbitrary files on the Web server by injecting shell metacharacters, effectively executing commands via the httpd process. Impact note: read-access t...

CVE-1999-0933

CVE-1999-0933 : The TeamTrack web server is affected by a directory-traversal vulnerability where a remote attacker can read arbitrary files using a .. (dot dot) attack. The available documents consistently describe this issue as a read-arbitrary-files vulnerability without detailing affected ver...