807 matches found
CVE-2002-1498
The CVE-2002-1498 entry documents a directory traversal vulnerability in SWServer 2.2 and earlier. The issue arises when an attacker supplies a URL containing .. sequences along with "/" or "\" characters, allowing reading of arbitrary files on the server. The vulnerability affects SWServer’s han...
Microsoft Internet Explorer allows arbitrary local file reading via "showHelp()" function
Overview A vulnerability in Microsoft Internet Explorer IE allows remote attackers to read arbitrary files on a vulnerable system. Description A vulnerability in the showHelp Method contained within IE may allow a remote attacker to read arbitrary files. For further details, please see the...
DSA-223 geneweb - information exposure
Bulletin has no description...
CVE-2002-2076
Directory traversal vulnerability in Lil' HTTP server 2.1 and 2.2 allows remote attackers to read arbitrary files via a .. dot dot in an HTTP GET request...
CVE-2002-0893
Directory traversal vulnerability in NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to read arbitrary files via a URL-encoded request to com.newatlanta.servletexec.JSP10Servlet containing "..%5c" modified dot-dot sequences...
CVE-2002-1034
none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files via an absolute pathname in the argument...
CVE-2002-0503
Directory traversal vulnerability in boilerplate.asp for Citrix NFuse 1.5 allows remote authenticated users to read arbitrary files via a .. dot dot in the NFuseTemplate parameter...
CVE-2002-0312
Directory traversal vulnerability in Essentia Web Server 2.1 allows remote attackers to read arbitrary files via a .. dot dot in a URL...
KPMG-2002020: Resin view_source.jsp Arbitrary File Reading
-------------------------------------------------------------------- Title: Resin viewsource.jsp Arbitrary File Reading BUG-ID: 2002020 Released: 17th Jun 2002 -------------------------------------------------------------------- Problem: ======== In a default installation of Resin server, the...
CVE-2002-0229
Safe Mode feature safemode in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using "LOAD DATA INFILE LOCAL" SQL statements...
CVE-2002-0138
CDRDAO 1.1.4 and 1.1.5 are affected by CVE-2002-0138: local users can read arbitrary files via the show-data command. The issue is documented in Mandrake advisory MDKSA-2005:089, which notes a patch is available for the affected packages. Exploitation details are not provided in the supplied docu...
CVE-1999-1456
thttpd HTTP server 2.03 and earlier allows remote attackers to read arbitrary files via a GET request with more than one leading / slash character in the filename...
CVE-2001-1042
Transsoft Broker 5.9.5.0 is vulnerable: an attacker can upload a .lnk file that points to a target file, enabling remote reading of arbitrary files and directories. Root cause: mis-handling of .lnk file uploads allows access to target paths. Impact: read access to arbitrary files/directories on t...
CVE-2001-0020
Directory traversal vulnerability in Arrowpoint aka Cisco Content Services, or CSS allows local unprivileged users to read arbitrary files via a .. dot dot attack...
CVE-2001-0253
Directory traversal vulnerability in hsx.cgi program in iWeb Hyperseek 2000 allows remote attackers to read arbitrary files and directories via a .. dot dot attack in the show parameter...
CVE-2001-0454
Directory traversal vulnerability in SlimServe HTTPd 1.1a allows remote attackers to read arbitrary files via a ... modified dot dot in the HTTP request...
CVE-2001-0360
Directory traversal vulnerability in help.cgi in Ikonboard 2.1.7b and earlier allows a remote attacker to read arbitrary files via a .. dot dot attack in the helpon parameter...
CVE-2001-0199
Directory traversal vulnerability in SEDUM HTTP Server 2.0 allows remote attackers to read arbitrary files via a .. dot dot attack in the HTTP GET request...