Code injection

Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.10 services for Lotus Domino might allow remote authenticated users to cause a denial of service daemon crash by checking out a document that is accessed through a connector, aka SPR MMOI7PSR8J...

IBM ENOVIA安全绕过漏洞

BUGTRAQ ID: 31748 CNCAN ID：CNCAN-2008101602 IBM ENOVIA是一款产品数据管理技术。 IBM ENOVIA存在一个未明安全问题，远程攻击者可以利用漏洞绕过安全限制，打开未授权文档。 目前没有详细漏洞细节提供。 IBM ENOVIA V5R18 SP4 IBM ENOVIA 厂商解决方案 可参考如下安全公告获得补丁信息： http://www-01.ibm.com/support/docview.wss?uid=swg27012567...

CVE-2008-4581

The Editor in IBM ENOVIA SmarTeam 5 before release 18 SP5, and release 19 before SP01, allows remote authenticated users to bypass intended access restrictions and read Document objects via the Workflow Process aka Flow Process view...

OpenOffice.org: Temporary files disclosure

Background OpenOffice.org is an office productivity suite, including word processing, spreadsheets, presentations, drawings, data charting, formula editing, and file conversion facilities. Description On start-up, OpenOffice.org 1.1.2 creates a temporary directory with insecure permissions. When ...

Доступ к защищенным документам Adobe (protection bypass)

Можно скопировать содержимое защищенного документа используя функцию "Save As"...

Дырка в GoAhead WebServer

Обратный путь в директориях позволяет доступ к любым документам и выполнение приложений...

Еще одна дырка в Internet Explorer

Функция window.external.NavigateAndFind позволяет обращаться к локальным и удаленным документам...

IBM Websphere Application Server 2.0.3.03.0.2.1 - Showcode

IBM Websphere Application Server 2.0.3.03.0.2.1 - Showcode source: https://www.securityfocus.com/bid/1500/info Certain versions of the IBM WebSphere application server ship with a vulnerability which allows malicious users to view the source of any document which resides in the web document root...

IBM Websphere Application Server 2.0./3.0/3.0.2.1 - Showcode

source: https://www.securityfocus.com/bid/1500/info Certain versions of the IBM WebSphere application server ship with a vulnerability which allows malicious users to view the source of any document which resides in the web document root directory. This is possible via a flaw which allows a defau...

Очередная дырка в IE - DHTMLED AttiveX

Элемент ActiveX позволяет редактирование документов, но не проверяет обращение к DOM, что позволяет прочитать любой локальный документ или документ из Intranet - сети...

CVE-2000-0288

CVE-2000-0288 affects Infonautics getdoc.cgi. The vulnerability allows remote attackers to bypass the payment phase for accessing documents by altering a form variable. The available sources confirm the existence and description of this issue but do not provide concrete details on affected versio...

Infonautic's getdoc.cgi may allow unauthorized access to documents

Message-ID: [email protected] Date: Tue, 11 Apr 2000 16:23:49 -0700 From: Black Watch Labs [email protected] To: [email protected] Subject: Infonautic's getdoc.cgi may allow unauthorized access to documents Hello Elias, As mentioned in the Friday, April 7 ema...

CVE-2000-0288

Infonautics getdoc.cgi allows remote attackers to bypass the payment phase for accessing documents via a modified form variable...

netscape.view.source.javascript.txt

Date: Tue, 1 Jun 1999 19:08:49 +0300 From: Georgi Guninski To: [email protected] Subject: Netscape Communicator "view-source:" security vulnerabilities There is a security vulnerability in Netscape Communicator 4.6 Win95, 4.07 Linux probably all 4.x versions in the way it works with...