807 matches found
Oracle Reports arbitrary file reading vulnerability
Overview Oracle Reports fails to validate URI parameters, possibly allowing a remote attacker to read arbitrary files on the Reports Server. Description Oracle Reports is an enterprise reporting tool that extracts data from multiple sources and inserts it into a formatted report. It is a componen...
Help Center Live 1.0/1.2/2.0 - 'module.php' Local File Inclusion
source: https://www.securityfocus.com/bid/15404/info Help Center Live is prone to a local file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to disclose sensitive information. This may help wi...
GuildFTPd Directory Traversal
Version 0.97 of GuildFTPd was detected. A security vulnerability in this product allows anyone with a valid FTP login to read arbitrary files on the system. OpenVAS Vulnerability Test $Id: GuildFTPD097.nasl 6063 2017-05-03 09:03:05Z teissa $ Description: GuildFTPd Directory Traversal Authors: Yoa...
FAQManager Arbitrary File Reading Vulnerability
FAQManager is a Perl-based CGI for maintaining a list of Frequently asked Questions. Due to poor input validation it is possible to use this CGI to view arbitrary files on the web server. For example: someserver.com/cgi-bin/faqmanager.cgi?toc=/etc/passwd%00 SPDX-FileCopyrightText: 2002 Matt Moore...
PHP.EXE / Apache HTTP Server Win32 Arbitrary File Reading Vulnerability - Active Check
A configuration vulnerability exists for PHP.EXE cgi running on Apache HTTP Server for Win32 platforms. SPDX-FileCopyrightText: 2002 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
PHPMyFAQ 1.5.1 - Local File Inclusion
PHPMyFAQ 1.5.1 - Local File Inclusion source: https://www.securityfocus.com/bid/14929/info PHPMyFAQ is prone to a local file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...
CVE-2001-1432
The Cherokee Web Server is affected by CVE-2001-1432: a directory traversal vulnerability that allows remote attackers to read arbitrary files by appending a ../ sequence in the URL. OpenVAS notes an additional issue where the process fails to drop root privileges after binding to a port, enablin...
[Full-disclosure] Samsung ADSL Modem Vulnerability
------------------------------------------------------------ - EXPL-A-2005-002 exploitlabs.com Advisory 031 - ------------------------------------------------------------ - Samsung ADSL Modem - AFFECTED PRODUCTS ================= Samsung ADSL Modem Samgsung Eletronics http://www.samsung.com DETAI...
CVE-2005-0479
Directory traversal vulnerability in ComGetLogFile.php3 for TrackerCam 5.12 and earlier allows remote attackers to read arbitrary files via ".." sequences and 1 "/" slash, 2 "" backslash, or 3 hex-encoded characters in the fn parameter...
CVE-2004-1399
Directory traversal vulnerability in the Attachment module 2.3.10 and earlier for phpBB allows remote attackers to read arbitrary files via a .. dot dot in the filename...
CVE-2005-0192
Directory traversal vulnerability in the parsing of Skin file names in RealPlayer 10.5 6.0.12.1040 and earlier allows remote attackers to read arbitrary files via a .. dot dot in an RJS filename...
CVE-2004-1399
Directory traversal vulnerability in the Attachment module 2.3.10 and earlier for phpBB allows remote attackers to read arbitrary files via a .. dot dot in the filename...
phpMyAdmin < 2.6.1-rc1 Multiple Remote Vulnerabilities
According to its banner, the remote version of phpMyAdmin is vulnerable to one or both of the following flaws : - An attacker may be able to exploit this software to execute arbitrary commands on the remote host on a server which does not run PHP in safe mode. - An attacker may be able to read...
CVE-2004-1598
Adobe Acrobat and Acrobat Reader 6.0 allow remote attackers to read arbitrary files via a PDF file that contains an embedded Shockwave swf file that references files outside of the temporary directory...
CVE-2003-1351
Directory traversal vulnerability in edittag.cgi in EditTag 1.1 allows remote attackers to read arbitrary files via a "%2F.." encoded slash dot dot in the file parameter...
LanSuite 2003 - Multiple Vulnerabilities
TITLE ===== 602Pro Lansuite 2003 - Multiple Vulnerabilities DESCRIPTION =========== “602Pro LAN SUITE is an easy-to-install and manage all-in-one server application. Its standards-based SMTP/POP3 e-mail server provides effective e-mail communication without the risk of destructive virus...
lansuite2003.txt
TITLE ===== 602Pro Lansuite 2003 - Multiple Vulnerabilities DESCRIPTION =========== 602Pro LAN SUITE is an easy-to-install and manage all-in-one server application. Its standards-based SMTP/POP3 e-mail server provides effective e-mail communication without the risk of destructive virus...
CVE-2003-0610
Directory traversal vulnerability in ePO agent for McAfee ePolicy Orchestrator 3.0 allows remote attackers to read arbitrary files via a certain HTTP request...
CVE-2003-0536
Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write access to a local directory to read arbitrary files as the PHP user or cause a denial of service via .. dot dot sequences in the 1 template or 2 lng parameters...