CVE-2005-4089

Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using the @import directive to download files from other domains that are not valid Cascading Style Sheets CSS files, as demonstrated using Google Desktop, aka...

CVE-2005-4089

Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using the @import directive to download files from other domains that are not valid Cascading Style Sheets CSS files, as demonstrated using Google Desktop, aka...

Revize CMS - Revize.XML Information Disclosure

Revize CMS - Revize.XML Information Disclosure source: https://www.securityfocus.com/bid/15482/info Revize CMS is prone to an information disclosure vulnerability. This issue is due to a failure in the application to restrict access to sensitive files. An attacker can exploit this vulnerability t...

Codebrws.asp Source Disclosure Vulnerability

Microsoft's IIS 5.0 web server is shipped with a set of sample files to demonstrate different features of the ASP language. One of these sample files allows a remote user to view the source of any file in the web root with the extension .asp, .inc, .htm, or .html. OpenVAS Vulnerability Test $Id:...

Non-Existent Page Physical Path Disclosure Vulnerability (HTTP)

The remote web server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2003 Michel Arboi SPDX-FileCopyrightText: Improved / extended code / detection routine since 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

Stronghold Swish

An information disclosure vulnerability was reported in a sample script provided with Red Hat SPDX-FileCopyrightText: 2003 Randy Matz Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Ultimate PHP Board users.dat Multiple Vulnerabilities

The remote host is running Ultimate PHP Board UPB. The remote version of this software is prone to a weak password encryption vulnerability and may store the users.dat file under the web document root with insufficient access control. %NASLMINLEVEL 70300 This script was written by Josh...

YaBBSe 1.5.5c Path disclosure problem

-------------------------------------------------------------------- -------- Team priestmasters YabbSE 1.5.5c Path disclosure ---------- -------------------------------------------------------------------- Software Vendor: http://sourceforge.net/projects/yabbse/ A path disclosure vuln exist in t...

McGallery 1.01.1 - Lang Argument File Disclosure

McGallery 1.01.1 - Lang Argument File Disclosure source: https://www.securityfocus.com/bid/13963/info McGallery is prone to a file disclosure vulnerability. This could let remote attackers access files on the computer in the context of the Web server process...

McGallery 1.0/1.1 - Lang Argument File Disclosure

source: https://www.securityfocus.com/bid/13963/info McGallery is prone to a file disclosure vulnerability. This could let remote attackers access files on the computer in the context of the Web server process. http://example.com/mcgallery/admin.php?lang=../../../../../../etc/passwd...

CVE-2005-1635

JGS-XA JGS-Portal 3.0.2 and earlier allows remote attackers to obtain the full server path via direct requests to 1 jgsportalref.php, 2 jgsportalland.php, 3 jgsportallog.php, 4 jgsportalglobalsponsor.php, 5 jgsportalglobal.php, 6 jgsportalsystem.php, 7 jgsportalviews.php; or multiple files in the...

[SePro Bugtraq] WBB Portal - JGS-Portal <= 3.0.2 - Multiple Vulnerabilities (09.05.05)

SePro Bugtraq WBB Portal - JGS-Portal = 3.0.2 - Multiple Vulnerabilities 09.05.05 Vendor: JGS-XA URL: http://www.jgs-xa.de/ Version: = 3.0.2 Type: SQL-Injections, XSS and Full Path Disclosures Discovered by deluxe89 and the Security-Project Team Description: ------------------------- The JGS-Port...

Adobe SVG Viewer 3.0 - ActiveX Control SRC Information Disclosure

Adobe SVG Viewer 3.0 - ActiveX Control SRC Information Disclosure source: https://www.securityfocus.com/bid/13490/info The Adobe SVG Viewer ActiveX control is prone to an information disclosure vulnerability. Reports indicate that the Adobe SVG Viewer ActiveX control may be employed to disclose t...

Nuke BookMarks 0.6 - 'Marks.php' Full Path Disclosure

source: https://www.securityfocus.com/bid/12906/info Nuke Bookmarks is prone to a path disclosure issue when invalid data is submitted. This issue can allow an attacker to access sensitive data that may be used to launch further attacks against a vulnerable computer...

Ciamos 0.9.2 - Highlight.php File Disclosure

Ciamos 0.9.2 - Highlight.php File Disclosure source: https://www.securityfocus.com/bid/12854/info Ciamos is reported prone to a file disclosure vulnerability. The full scope of this vulnerability is not currently known, however, it is demonstrated that this issue may be leveraged to disclose the...

phpWebSite: Arbitrary PHP execution and path disclosure

Background phpWebSite provides a complete web site content management system. Description NST discovered that, when submitting an announcement, uploaded files aren't correctly checked for malicious code. They also found out that phpWebSite is vulnerable to a path disclosure. Impact A remote...

[SA14064] Xoops Incontent Module Arbitrary File Content Disclosure

TITLE: Xoops Incontent Module Arbitrary File Content Disclosure SECUNIA ADVISORY ID: SA14064 VERIFY ADVISORY: http://secunia.com/advisories/14064/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Incontent 3.x module for Xoops...

Captaris Infinite Mobile Delivery Webmail 2.6 - Full Path Disclosure

Captaris Infinite Mobile Delivery Webmail 2.6 - Full Path Disclosure source: https://www.securityfocus.com/bid/12399/info Infinite Mobile Delivery Webmail is reportedly affected by a path disclosure vulnerability. This issue could permit a malicious user to expose the root path of the affected...

Captaris Infinite Mobile Delivery Webmail 2.6 - Full Path Disclosure

source: https://www.securityfocus.com/bid/12399/info Infinite Mobile Delivery Webmail is reportedly affected by a path disclosure vulnerability. This issue could permit a malicious user to expose the root path of the affected application. http://www-webmailusersite-com/username/Folder:?...

STG Security Advisory 2005-01-13.25

STG Security Advisory: SSA-20050113-25 ZeroBoard multiple vulnerabilities Revision 1.1 Date Published: 2004-12-31 KST Last Update: 2005-1-13 Disclosed by SSR Team [email protected] Summary ======= ZeroBoard is one of widely used web BBS applications in Korea. However, an input validation...