Directory Traversal in AutoFTP Manager

Vulnerability ID: HTB22566 Reference: http://www.htbridge.ch/advisory/directorytraversalinautoftpmanager.html Product: AutoFTP Manager Vendor: DeskShare http://www.deskshare.com/afm.aspx Vulnerable Version: 4.31 and Probably Prior Versions Vendor Notification: 05 August 2010 Vulnerability Type:...

Directory Traversal in 3D FTP Client

Vulnerability ID: HTB22565 Reference: http://www.htbridge.ch/advisory/directorytraversalin3dftpclient.html Product: 3D FTP Client Vendor: SiteDesigner Technologies, Inc. http://3dftp.com/3dftp.htm Vulnerable Version: 9.0 build 2 and Probably Prior Versions Vendor Notification: 05 August 2010...

Google Chrome Multiple Unspecified Vulnerabilities - July 10

The host isnstalled with Google Chrome and is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultunspecifiedvulnjul10.nasl 5394 2017-02-22 09:22:42Z teissa $ Google Chrome Multiple Unspcified Vulnerabilities - July 10 Authors: Madhuri D Copyright:...

Phpunity Newsmanager Local File Inclusion Vulnerability

Phpunity Newsmanager is prone to local file inclusion vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-3568: Undefined Security Weakness

Comment RSS 5.x before 5.x-2.2 and 6.x before 6.x-2.2, a module for Drupal, does not properly enforce permissions when a link is added to the RSS feed, which allows remote attackers to obtain the node title and possibly other sensitive content by reading the feed...

[InterN0T] SkyBlueCanvas 1.1 r237 - Multiple Vulnerabilities

SkyBlueCanvas - XSS and Path Content Disclosure Vulnerabilities Version Affected: 1.1 r237 newest version: 1.1 r246 Info: SkyBlueCanvas Lightweight CMS is an open source, free content management system written in php and built specifically for small web sites. The entire site you are viewing is a...

Sun Java Directory Server Information Disclosure Vulnerability - Windows

Sun Java Directory Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-1332

The Online Help feature in Sun Java System Directory Server 5.2 and Enterprise Edition 5 allows remote attackers to determine the existence of files and directories, and possibly obtain partial contents of files, via unspecified vectors...

PT-2009-1236 · Apache · Apache Tomcat

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 4.1.32 through 4.1.34 Apache Tomcat versions 5.5.10 through 5.5.20 Description: The issue is related to the doRead method, which fails to return a -1 when a certain error condition occurs. This can cause Tomcat to send...

SimpGB version 1.46.02 File Content Disclosure Vulnerability

netVigilance Security Advisory 65 SimpGB version 1.46.02 File Content Disclosure Vulnerability Description: SimpGB is a guestbook with data stored in MySQL, administration interface and support for multiple languages. Features: Data stored in MySQL, Administration interface, Support for multiple...

simpgb14602-disclose.txt

netVigilance Security Advisory 65 SimpGB version 1.46.02 File Content Disclosure Vulnerability Description: SimpGB is a guestbook with data stored in MySQL, administration interface and support for multiple languages. Features: Data stored in MySQL, Administration interface, Support for multiple...

ColdFusion / JRun on IIS Double Encoded NULL Byte Request File Content Disclosure

The version of ColdFusion running on the remote host allows an attacker to view the contents of files not interpreted by ColdFusion itself and hosted on the affected system. The problem is due to the fact that with ColdFusion, URL-encoded filenames are decoded first by IIS and then again by...

Adobe Macromedia ColdFusion source code leak

Adding twice encoded NULL byte to path allows .CFM file content disclosure...

[SA19018] Issue Dealer Unpublished Content Disclosure Weakness

TITLE: Issue Dealer Unpublished Content Disclosure Weakness SECUNIA ADVISORY ID: SA19018 VERIFY ADVISORY: http://secunia.com/advisories/19018/ CRITICAL: Not critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Issue Dealer 0.x http://secunia.com/product/8384/ DESCRIPTION: A weakness has...

eXtremeTraversal.txt

eXtreme Styles mod = 2.2.1 Multiple Vulnerabilities ==================================================== http://www.phpbbstyles.com/ Description =========== These vulnerabilities could allow an attacker that has gained administrative access view file content on the system. 1. Remote File Content...

eXtreme Styles mod <= 2.2.1 Multiple Vulnerabilities

Site: http://www.phpbbstyles.com/ 1. Remote File Content Disclosure http://forum/admin/xsedit.php?edit=../../../../etc/passwd 2. Full Path Disclosure http://forum/admin/xsedit.php?edit=&viewbackup=1 http://wtf.bz/...

eXtreme Styles mod <= 2.2.1 Multiple Vulnerabilities

eXtreme Styles mod = 2.2.1 Multiple Vulnerabilities ==================================================== http://www.phpbbstyles.com/ Description =========== These vulnerabilities could allow an attacker that has gained administrative access view file content on the system. 1. Remote File Content...

Turbo Seek 1.7.2 Files Reading Vulnerability - Active Check

The remote host is running Turbo Seek. Turbo Seek is a search engine and directory tool. The remote version of this software contains a file content disclosure flaw which may allow a malicious user to read arbitrary files on the remote server with the privileges the remote web server is running...

Xerver 4.17 - Forced Directory Listing

source: https://www.securityfocus.com/bid/15135/info Xerver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit a vulnerability to disclose the contents of any Web accessible...

CVE-2002-1718

Microsoft Internet Information Server IIS 5.1 may allow remote attackers to view the contents of a Frontpage Server Extension FPSE file, as claimed using an HTTP request for colegal.htm that contains .. dot dot sequences...