CVE-2004-2308

Cross-site scripting XSS vulnerability in cPanel 9.1.0 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the dir parameter in dohtaccess.html...

CVE-2004-2308: Undefined Security Weakness

Cross-site scripting XSS vulnerability in cPanel 9.1.0 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the dir parameter in dohtaccess.html...

CVE-2004-2309: Undefined Security Weakness

Directory traversal vulnerability in Crob FTP Server 3.5.1 allows local users to browse outside the FTP root via multiple ../ dot dot slash in the DIR command...

CVE-2005-2436: Undefined Security Weakness

browse.php in Website Baker Project allows remote attackers to obtain sensitive data via 1 a directory that does not exist in the dir parameter or 2 a direct request to certain php files, which reveal the path in an error message...

CVE-2005-2435: Undefined Security Weakness

Cross-site scripting XSS vulnerability in browse.php in Website Baker Project allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

CVE-2004-2222: Undefined Security Weakness

Directory traversal vulnerability in index.php in FsPHPGallery before 1.2 allows remote attackers to list arbitrary directories via the dir parameter...

CVE-2004-2184: Undefined Security Weakness

Directory traversal vulnerability in Digicraft Yak! server 2.0 through 2.1.2 allows remote attackers to read or write arbitrary files via "../" or ".." sequences in commands such as 1 dir or 2 put...

WebAPP 0.9.9.2.1 - Remote Command Execution (1)

WebAPP 0.9.9.2.1 - Remote Command Execution 1 !/usr/bin/perl T r a p - S e t U n d e r G r o u n D H a c k i n g T e a m Remote C0mmand Executing Expl0it - For WebAPP CGI Exploit By : A l p h a P r o g r a m m e r Sirus-v ; E-Mail : [email protected] [email protected] This xpl Open a...

CVE-2003-1207

Crob FTP Server 3.5.1 allows remote authenticated users to cause a denial of service crash via a dir command with a large number of "." characters followed by a "/" string...

CVE-2003-1206

Format string vulnerability in Crob FTP Server 2.60.1 allows remote attackers to cause a denial of service crash via "%s" or "%n" sequences in 1 the username during login, or other FTP commands such as 2 dir...

CVE-2003-1207: Undefined Security Weakness

Crob FTP Server 3.5.1 allows remote authenticated users to cause a denial of service crash via a dir command with a large number of "." characters followed by a "/" string...

CVE-2003-1206: Undefined Security Weakness

Format string vulnerability in Crob FTP Server 2.60.1 allows remote attackers to cause a denial of service crash via "%s" or "%n" sequences in 1 the username during login, or other FTP commands such as 2 dir...

CVE-2003-1146

Cross-site scripting XSS vulnerability in John Beatty Easy PHP Photo Album 1.0 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

CVE-2003-1146: Undefined Security Weakness

Cross-site scripting XSS vulnerability in John Beatty Easy PHP Photo Album 1.0 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

CVE-2005-0256

The wufnmatch function in wufnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service CPU exhaustion by recursion via a glob pattern with a large number of wildcard characters, as demonstrated using the dir command...

CVE-2005-0256

The wufnmatch function in wufnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service CPU exhaustion by recursion via a glob pattern with a large number of wildcard characters, as demonstrated using the dir command...

CVE-2005-1233: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in PHP Labs proFile allows remote attackers to inject arbitrary web script or HTML via the 1 dir or 2 file parameters...

CVE-2005-1054: Undefined Security Weakness

PHP remote file inclusion vulnerability in news.php in ModernBill 4.3.0 and earlier allows remote attackers to execute arbitrary PHP code by modifying the DIR parameter to reference a URL on a remote web server that contains the code...

CVE-2005-0860: Undefined Security Weakness

PHP remote file inclusion vulnerability in TRG News Script 3.0 allows remote attackers to execute arbitrary PHP code via the dir parameter to 1 article.php, 2 authorall.php, 3 comment.php, 4 display.php, or 5 displayall.php...

CVE-2005-0380: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in 1 printcategory.php, 2 login.php, 3 setup.php, 4 askpassword.php, or 5 error.php in ZeroBoard 4.1pl5 and earlier allow remote attackers to execute arbitrary PHP code by modifying the dir parameter to reference a URL on a remote web server that...