113 matches found
MyBulletinBoard 1.x UserCP.PHP Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19195/info MyBulletinBoard is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the...
Pheap 1.x/2.0 Edit.PHP Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22670/info Pheap is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve and edit the contents of arbitrary files...
Saxopress URL Parameter Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17474/info SAXoPRESS is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve and...
XOOPS <= 2.3.3 - Remote File Disclosure Vulnerability (.htaccess)
No description provided by source. ======================================================================== XOOPS = 2.3.3 Remote Arbitrary File Retrieval ======================================================================== Affected Software : XOOPS = 2.3.3 Author : Luca daath De Fulgentis -...
phpXplorer 0.9.33 Action.PHP Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16292/info phpXplorer is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve...
TYPO3 Unauthenticated Arbitrary File Retrieval
No description provided by source. ?php / TYPO3-SA-2010-022.php Exploit Title: TYPO3 Unauthenticated Arbitrary File Retrieval TYPO3-SA-2010-020, TYPO3-SA-2010-022 Date: 29/12/2010 Author: ikki Software Link: http://typo3.org/download/, http://sourceforge.net/projects/typo3/files/ Version: 4.2.15,...
webMethods Glue <= 6.5.1 Console Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23423/info webMethods Glue is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the...
Claroline 1.x Rqmkhtml.PHP Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17343/info Claroline is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve...
TinyPHPForum 3.6 - Multiple Directory Traversal Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/16163/info TinyPHPForum is prone to multiple directory traversal vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these vulnerabilitie...
avm fritz!dsl igd control service 2.2.29 - Directory Traversal information disclosure vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22093/info The AVM Fritz!DSL IGD Control Service is prone to a remote information-disclosure vulnerability because the application fails to properly sanitize user-supplied input. Exploiting this issue allows remote,...
ESA-2014-012: EMC Documentum TaskSpace Multiple Vulnerabilities
ESA-2014-012.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-012: EMC Documentum TaskSpace Multiple Vulnerabilities EMC Identifier: ESA-2014-012 CVE Identifier: CVE-2014-0629, CVE-2014-0630 Severity Rating: CVSS v2 Base Score: See below for individual scores Affected Products: Document...
DDIVRT-2013-53 Actuate 'ActuateJavaComponent' Multiple Vulnerabilities
Title ----- DDIVRT-2013-53 Actuate 'ActuateJavaComponent' Multiple Vulnerabilities Severity -------- High Date Discovered --------------- March 19, 2013 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Dennis Lavrinenko, Bobby Lockett, and r@b13$ 1. Actuate...
Novell File Reporter SRS Arbitrary File Retrieval (CVE-2012-4957)
A file retrieval vulnerability has been reported in Novell File Reporter. The vulnerability is due to lack of authorization on certain requests. A remote attacker can exploit this issue by sending a specially crafted request to the affected service. Successful exploitation could result in arbitra...
Novell File Reporter contains multiple vulnerabilities
Overview Novell File Reporter 1.0.2 contains multiple vulnerabilities including a heap overflow, arbitrary file retrieval, and arbitrary file upload. Description The Rapid7 advisory states:CVE-2012-4956 - Heap Overflow When handling requests of name "SRS", the NFRAgent.exe fails to generate a...
DDIVRT-2012-42 Novell GroupWise Agents Arbitrary File Retrieval (CVE-2012-0419)
Title ----- DDIVRT-2012-42 Novell GroupWise Agents Arbitrary File Retrieval CVE-2012-0419 Severity -------- High Date Discovered --------------- April 2, 2012 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: r@b13$ Vulnerability Description...
GLSA-201206-11 : Pidgin: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201206-11 Pidgin: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Pidgin. Please review the CVE identifiers referenced below for details. Impact : These vulnerabilities allow for arbitrary file retrieval,...
CVE-2011-2737
RSA enVision 3.x and 4.x prior to 4 SP4 P3 contain an arbitrary file retrieval vulnerability (CVE-2011-2737) that may allow unauthenticated remote attackers to read files via unspecified vectors. The issue is acknowledged in RSA ESA-2011-030, which recommends upgrading to RSA enVision 4 SP4 P3 as...
CVE-2011-2737
RSA enVision 3.x and 4.x before 4 SP4 P3 allows remote attackers to read arbitrary files via unspecified vectors, related to an "arbitrary file retrieval vulnerability."...
WordPress Plugin BackWPup 1.4 - Multiple Information Disclosure Vulnerabilities
WordPress Plugin BackWPup 1.4 - Multiple Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/46610/info The BackWPup plugin for WordPress is prone to multiple information-disclosure vulnerabilities because it fails to properly sanitize user-supplied input. Attackers c...
TYPO3 Unauthenticated Arbitrary File Retrieval
Exploit for php platform in category web applications ?php / TYPO3-SA-2010-022.php Exploit Title: TYPO3 Unauthenticated Arbitrary File Retrieval TYPO3-SA-2010-020, TYPO3-SA-2010-022 Date: 29/12/2010 Author: ikki Software Link: http://typo3.org/download/, http://sourceforge.net/projects/typo3/file...