ColdFusion / JRun on IIS Double Encoded NULL Byte Request File Content Disclosure

The version of ColdFusion running on the remote host allows an attacker to view the contents of files not interpreted by ColdFusion itself and hosted on the affected system. The problem is due to the fact that with ColdFusion, URL-encoded filenames are decoded first by IIS and then again by...

Adobe Macromedia ColdFusion source code leak

Adding twice encoded NULL byte to path allows .CFM file content disclosure...

[SA19018] Issue Dealer Unpublished Content Disclosure Weakness

TITLE: Issue Dealer Unpublished Content Disclosure Weakness SECUNIA ADVISORY ID: SA19018 VERIFY ADVISORY: http://secunia.com/advisories/19018/ CRITICAL: Not critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Issue Dealer 0.x http://secunia.com/product/8384/ DESCRIPTION: A weakness has...

eXtremeTraversal.txt

eXtreme Styles mod = 2.2.1 Multiple Vulnerabilities ==================================================== http://www.phpbbstyles.com/ Description =========== These vulnerabilities could allow an attacker that has gained administrative access view file content on the system. 1. Remote File Content...

eXtreme Styles mod <= 2.2.1 Multiple Vulnerabilities

eXtreme Styles mod = 2.2.1 Multiple Vulnerabilities ==================================================== http://www.phpbbstyles.com/ Description =========== These vulnerabilities could allow an attacker that has gained administrative access view file content on the system. 1. Remote File Content...

eXtreme Styles mod <= 2.2.1 Multiple Vulnerabilities

Site: http://www.phpbbstyles.com/ 1. Remote File Content Disclosure http://forum/admin/xsedit.php?edit=../../../../etc/passwd 2. Full Path Disclosure http://forum/admin/xsedit.php?edit=&viewbackup=1 http://wtf.bz/...

Turbo Seek 1.7.2 Files Reading Vulnerability - Active Check

The remote host is running Turbo Seek. Turbo Seek is a search engine and directory tool. The remote version of this software contains a file content disclosure flaw which may allow a malicious user to read arbitrary files on the remote server with the privileges the remote web server is running...

Xerver 4.17 - Forced Directory Listing

source: https://www.securityfocus.com/bid/15135/info Xerver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit a vulnerability to disclose the contents of any Web accessible...

CVE-2002-1718

Microsoft Internet Information Server IIS 5.1 may allow remote attackers to view the contents of a Frontpage Server Extension FPSE file, as claimed using an HTTP request for colegal.htm that contains .. dot dot sequences...

aeNovo Database Content Disclosure Vulnerability

The problem is that the aeNovo database file "dbase/aeNovo1.mdb" by default is accessible. you can disclose the ADMIN's password . The Login Page : "logon.asp"...

[SA12401] Smart Guest Book Database Content Disclosure Security Issue

TITLE: Smart Guest Book Database Content Disclosure Security Issue SECUNIA ADVISORY ID: SA12401 VERIFY ADVISORY: http://secunia.com/advisories/12401/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Smart Guest Book 2.x...

[NT] Serena Software's TeamTrack Sensitive Content Disclosure

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Ultimate PHP Board 1.0 final Beta - viewtopic.php Directory Contents Browsing

Ultimate PHP Board 1.0 final Beta - viewtopic.php Directory Contents Browsing source: https://www.securityfocus.com/bid/6334/info Ultimate PHP Board UPB is a freely available, open source PHP Bulletin Board. It is available for the Unix and Linux operating systems. Under some circumstances, it ma...

Sun i-Runbook 2.5.2 - Directory and File Content Disclosure

Sun i-Runbook 2.5.2 - Directory and File Content Disclosure source: https://www.securityfocus.com/bid/5209/info Sun i-Runbook is a single point of technical and administration management for Sun production environments. i-Runbook provides a web interface. i-Runbook can be led to disclose the...

Sun i-Runbook 2.5.2 - Directory and File Content Disclosure

source: https://www.securityfocus.com/bid/5209/info Sun i-Runbook is a single point of technical and administration management for Sun production environments. i-Runbook provides a web interface. i-Runbook can be led to disclose the contents of a known resource. This is accomplished by submitting...

Microsoft Internet Information Server (IIS) discloses contents of files via crafted request for .htr file

Overview A vulnerability exists in Microsoft Internet Information Server IIS which could disclose sensitive information contained in CGI-type files. Typically a CGI/script file on a web server should only be executable and not readable by remote users. Sensitive information contained in such a fi...