CVE-2004-0778

CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned...

CVE-2004-0778

CVE-2004-0778 affects CVS: 1.11.x before 1.11.17 and 1.12.x before 1.12.9. The flaw enables remote attackers to determine the existence of arbitrary files/directories by abusing the -X option for an alternate history file, causing different error messages to be returned. The OpenVAS-derived entri...

LocalWeb2000 2.10 Crafted Request File Disclosure

Binary data 1508.prm...

thttpd/mini_httpd Virtual Hosting File Disclosure

Binary data 2124.prm...

THTTPD/Mini_HTTPD < 2.22 File Disclosure

Binary data 2121.prm...

thttpd < 2.20 Arbitrary World-Readable File Disclosure

Binary data 2120.prm...

THTTPD/Mini_HTTPD < 1.16 File Disclosure

Binary data 2122.prm...

thttpd/mini_httpd < 2.24 Virtual Hosting File Disclosure

Binary data 2125.prm...

QuiXplorer directory traversal

Title: QuiXplorer directory traversal Affects: = QuiXplorer 2.3 Effect: file disclosure, web server's user read access Id: cbsa-0003 Release Date: 2004 08 14 Author: Cyrille Barthelemy [email protected] -- 1. Introduction ------------------ From QuiXplorer documentation : "QuiXplorer is a...

rsync sanitize_path() Function Arbitrary File Disclosure

An information disclosure vulnerability exists in rsync due to improper validation of user-supplied input to the sanitizepath function. An unauthenticated, remote attacker can exploit this, via a specially crafted path, to generated an absolute filename in place of a relative filename, resulting...

FreeBSD : popfile file disclosure (152)

The following package needs to be updated: popfile %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg12c7b7aeec9011d8b913000c41e2cdad.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

popfile file disclosure

John Graham-Cumming reports that certain configurations of POPFile may allow the retrieval of any files with the extensions .gif, .png, .ico, .css, as well as some files with the extension .html...

IRM 009: RiSearch and RiSearch ProPro are vulnerable to open FTP/HTTP proxy, directory listings and file disclosure vulnerabilities

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- IRM Security Advisory No. 009 RiSearch and RiSearch ProPro are vulnerable to open FTP/HTTP proxy, directory listings and file disclosure vulnerabilities Vulnerablity Type / Importance: Network Subversion, Open Proxy, Brute-For...

Jaws 0.2/0.3 - 'action' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10670/info JAWS is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: JAWS is prone to a cross-site scripting vulnerability. This...

Jaws 0.2/0.3 - 'gadget' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/10670/info JAWS is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: JAWS is prone to a cross-site scripting vulnerability. This...

Jaws 0.2/0.3 - Cookie Manipulation Authentication Bypass

source: https://www.securityfocus.com/bid/10670/info JAWS is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: JAWS is prone to a cross-site scripting vulnerability. This...

Jaws 0.20.3 - Cookie Manipulation Authentication Bypass

Jaws 0.20.3 - Cookie Manipulation Authentication Bypass source: https://www.securityfocus.com/bid/10670/info JAWS is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: JAWS i...

Jaws 0.20.3 - gadget Traversal Arbitrary File Access

Jaws 0.20.3 - gadget Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/10670/info JAWS is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: JAWS is...

Jaws 0.20.3 - action Cross-Site Scripting

Jaws 0.20.3 - action Cross-Site Scripting source: https://www.securityfocus.com/bid/10670/info JAWS is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: JAWS is prone to a...

phpHeaven phpMyChat 0.14.5 - edituser.php3?do_not_login Authentication Bypass

phpHeaven phpMyChat 0.14.5 - edituser.php3?donotlogin Authentication Bypass source: https://www.securityfocus.com/bid/10556/info phpHeaven phpMyChat is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data and design flaws. The followin...