pMachine 1.0/2.x - Multiple Script 'sfx' Full Path Disclosures

source: https://www.securityfocus.com/bid/7980/info It has been reported that pMachine is prone to remote a patch disclosure vulnerability when accessing various scripts. When a request is made for a target PHP script, possibly requiring a blank URI parameter, pMachine is said to throw an...

WebServer Pro All Version Vulnerability

-- WebSite Pro 2.5.4/all versions Vulnerability -- March 15, 2001 Website Pro, all versions, reveals the web directory with a simple character similar to the past vulnerability but all have been fixed except this one. Example: www.target.com/:/ -this will reveal the exact location 403 Forbidden...

Microsoft IIS 5.0 - Indexed Directory Disclosure

Microsoft IIS 5.0 - Indexed Directory Disclosure source: https://www.securityfocus.com/bid/1756/info If Index Server is enabled in Microsoft Internet Information Server 5.0, it is possible for a remote user to view the entire root directory structure and all sub-directories due to a flaw in the W...

sambar-http.txt

Sambar Server search CGI vulnerability + Advisory by dethy www.synnergy.net |==============================================| Advisory 13 Vulnerable: Sambar Server 4.4 Beta 3 Systems : WinNT, Win95 OSR2, possibly Linux affected Product : http://www.sambar.com Discovery : [email protected]...

CVE-2000-0554

Ceilidh allows remote attackers to obtain the real path of the Ceilidh directory via the translatedpath hidden form field...

Sean MacGuire Big Brother 1.x - Directory Traversal

Sean MacGuire Big Brother 1.x - Directory Traversal source: https://www.securityfocus.com/bid/1455/info Versions 1.4H and prior of BB4 Big Brother are susceptible to a directory traversal vulnerability which would allow a remote user to view the contents of any directory or file on the system...

windows2k.iss

I found there is a security problem about shtml.exe that allows anyone to explore the local path of IIS web server. Tested on windows2000 server.shtml.exe is a program issued with Forntpage Extention server for viewing smart HTML file, If we install Frontpage on Windows2000 server, a directory...

CVE-2000-0098

Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist...

CVE-1999-0569

A URL for a WWW directory allows auto-indexing, which provides a list of all files in that directory if it does not contain an index.html file...

cf40.txt

Ok, I've had CF 4.0 eval for approx. 1 hour now, and here's over a half dozen more reasons to not use sample pages: http://server/cfdocs/exampleapp/docs/sourcewindow.cfm?Template= --shows you contents of any file you want http://server/cfdocs/snippets/evaluate.cfm --if the expression evaluator ha...

Debian 2.1 - HTTPd

Debian 2.1 - HTTPd source: https://www.securityfocus.com/bid/318/info The Debian GNU/Linux 2.1 apache package by default allows anyone to view /usr/doc via the web, remotely. This is because srm.conf is preconfigured with the line: Alias /doc/ /usr/doc/ Boa is also preconfigured this way. lynx...

CVE-1999-0569

A URL for a WWW directory allows auto-indexing, which provides a list of all files in that directory if it does not contain an index.html file...

PT-1999-1187 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The NFS exports system-critical data to the world, including sensitive directories like the root directory / or a password file. Recommendations: At the moment, there is no information...