807 matches found
StatusNet/Laconica 0.7.4/0.8.2/0.9.0beta3 - Arbitrary File Reading
+-------------------------------------------------------------------------------+ + StatusNet/Laconica title = $this-trimmed'title'; $this-filename = INSTALLDIR.'/doc-src/'.$this-title; //1 if !fileexists$this-filename $this-clientError'No such document.'; return; $this-showPage;...
CVE-2012-2926
Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10; FishEye and Crucible before 2.5.8, 2.6 before 2.6.8, and 2.7 before 2.7.12; Bamboo before 3.3.4 and 3.4.x before 3.4.5; and Crowd before 2.0.9, 2.1 before 2.1.2, 2.2 before 2.2.9, 2.3 before 2.3.7, and...
CVE-2011-4643
Multiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote authenticated users to read arbitrary files via a .. dot dot in a URI to 1 Splunk Web or 2 the Splunkd HTTP Server, aka SPL-45243...
PhpMyadmin arbitrary file reading vulnerability-vulnerability warning-the black bar safety net
PhpMyadmin to achieve the wrong using the simplexmlloadstring function for parsing xml, but this function is in default and did not deal with external entities of safety, causing the user can by means of xml files to read and access the application has permission to access system and network...
PT-2011-29: Arbitrary file reading and arbitrary code execution in Router Manager for D-Link DIR-300
Positive Research Center has discovered a vulnerability that allows one to obtain content of arbitrary files and execute arbitrary code. How to fix Update your software up to the latest version Update link Advisory status 09.09.2011 - Vendor is notified 09.09.2011 - Vendor gets vulnerability...
Joomla Appointment Booking Pro Arbitrary File Reading
Appointment Booking Pro is a native Joomla component ================================= Last login: Tue Jun 7 2010 10:20:22 on ttys000 / / / / / / / / / / / / / : / / / / / / / / / / / / / / / | / / / / / / / / / / / / / // / // / / / / --X-- / / / / / / / / / / / / / / / / / / / /...
Mojolicious Directory Traversal Vulnerability
The host is running Mojolicious and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbmojoliciousdirtravvuln.nasl 7577 2017-10-26 10:41:56Z cfischer $ Mojolicious Directory Traversal Vulnerability Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone Networks Gmb...
CVE-2011-0396
Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.0 before 8.05.23, 8.1 before 8.12.49, 8.2 before 8.24.1, and 8.3 before 8.32.13, when a Certificate Authority CA is configured, allow remote attackers to read arbitrary files via unspecified vectors, aka Bug ID CSCtk12352...
CVE-2010-2445
freeciv 2.2 before 2.2.1 and 2.3 before 2.3.0 allows attackers to read arbitrary files or execute arbitrary commands via a scenario that contains Lua functionality, related to the 1 os, 2 io, 3 package, 4 dofile, 5 loadfile, 6 loadlib, 7 module, and 8 require modules or functions...
CVE-2009-3123
CVE-2009-3123 is a directory traversal vulnerability in Wap-Motor (before version 18.1) affecting the file gallery/gallery.php . The issue occurs when an attacker supplies a malicious value for the image parameter containing “..”, enabling an attacker to read arbitrary files and potentially discl...
CVE-2009-1368
Directory traversal vulnerability in index.php in moziloCMS 1.11 allows remote attackers to read arbitrary files via a .. dot dot in the page parameter. NOTE: this might be the same issue as CVE-2008-6126.2, which may have been fixed in 1.10.3...
CVE-2008-3087
CVE-2008-3087 affects Kasseler CMS 1.3.0 and enables a directory traversal via a .. in the file parameter to index.php (possibly related to the phpManual module). The NVD entry records this as a medium-severity vulnerability (CVSS v2 base score 5.0) with network access and no authentication requi...
CVE-2008-1415
CVE-2008-1415 affects the web app component index.php in Multiple Time Sheets (MTS) 5.0 and earlier. The vulnerability is a directory traversal through the tab parameter, using modified dot-dot sequences ("../..//"), allowing remote attackers to read arbitrary files. The provided documents do not...
CVE-2008-0396
CVE-2008-0396 is a directory traversal vulnerability in BitDefender Update Server (http.exe) used by BitDefender products. The vulnerability allows an unauthenticated remote attacker to read arbitrary files by crafting HTTP requests with directory traversal sequences (..). The issue affects the U...
CVE-2007-5447
ioncubeloaderwin5.2.dll in the ionCube Loader 6.5 extension for PHP 5.2.4 does not follow safemode and disablefunctions restrictions, which allows context-dependent attackers to bypass intended limitations, as demonstrated by reading arbitrary files via the ioncubereadfile function...
CVE-2006-6725
Multiple directory traversal vulnerabilities in PHPBuilder 0.0.2 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the filename parameter to 1 lib/htm2php.php and 2 sitetools/htm2php.php. NOTE: The provenance of this information is unknown; the details are obtained...
ContentServ 4.x - '/admin/FileServer.php' File Disclosure
ContentServ again still features remote reading of arbitrary files ==================================================================== ContentServ is a cms and "cross media publishing" software. Let me quote from their website: "At ContentServ, there is always something happening. We continously...
CVE-2006-5319
Foafgen 0.3 is affected by a directory traversal in redir.php that allows a remote attacker to read arbitrary files using a .. segment in the foaf parameter. The vulnerability is triggered by supplying a traversing path via the foaf parameter, enabling access to filesystem content. Exploitation d...
FreeBSD : shoutcast -- XSS, information exposure (67dbe99f-0f09-11db-94f8-00e029485e38)
Goober's advisory reports reports that shoutcast is vulnerable to an arbitrary file reading vulnerability : Impact of the vulnerability depends on the way the product was installed. In general, the vulnerability allows the attacker to read any file which can be read by the Shoutcast server proces...
