350 matches found
Microsoft Internet Explorer 5 JavaScript Local File Enumeration Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/3779/info Microsoft Internet Explorer is prone to a vulnerability which may disclose sensitive information to a malicious webmaster. When script code includes a file outside of the document it is embedded in and the file...
Typo3 3.5 b5 Showpic.PHP File Enumeration Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6982/info TYPO3 is prone to a vulnerability that will allow remote attackers to enumerate whether or not files exist on the system hosting the software. This issue exists in the 'showpic.php' and 'thumbs.php' scripts. Thi...
TIPS MailPost 5.1.1 - Remote File Enumeration Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11599/info TIPS MailPost is affected by a remote file enumeration vulnerability. This issue is due to a failure to properly sanitize user requests. An attacker may leverage this issue to gain knowledge of the existence of...
Microsoft Internet Explorer 5.0.1 LoadPicture File Enumeration Weakness
No description provided by source. source: http://www.securityfocus.com/bid/9611/info Microsoft Internet Explorer is prone to an issue that may permit a remote site to enumerate the existence of files on the client system. This may be exploited via abuse of the VBScript LoadPicture method...
Windows Media Player 9.0 ActiveX Control File Enumeration Weakness
No description provided by source. source: http://www.securityfocus.com/bid/12032/info The Windows Media Player ActiveX control is prone to a security weakness that may allow a malicious Web page to enumerate files that exist on the client computer. This could aid in further attacks. This issue i...
Microsoft Internet Explorer 5 JavaScript Local File Enumeration Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/3779/info Microsoft Internet Explorer is prone to a vulnerability which may disclose sensitive information to a malicious webmaster. When script code includes a file outside of the document it is embedded in and the file...
IBM AIX 5.3 GetShell and GetCommand File Enumeration Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16102/info IBM AIX is prone to a local vulnerability in getShell and getCommand. This issue may let local attackers enumerate the existence of files on the computer that they wouldn't ordinarily be able to see...
CVE-2014-3837
The document application in ownCloud Server before 6.0.3 uses sequential values for the fileid, which allows remote authenticated users to enumerate shared files via unspecified vectors...
Code injection
The document application in ownCloud Server before 6.0.3 uses sequential values for the fileid, which allows remote authenticated users to enumerate shared files via unspecified vectors...
QNX - .Phgrafx File Enumeration
QNX - .Phgrafx File Enumeration source: www.securityfocus.com/bid/66098/info QNX Phgrafx is prone to a file-enumeration weakness. An attacker can exploit this issue to enumerate the files present in the system's root directory; this may aid in further attacks. QNX 6.5.0 SP1, 6.5.0, 6.4.1, 6.3.0,...
QNX 6.x phgrafx File Enumeration
QNX 6.x phgrafx file enumeration vulnerability by cenobyte 2013 - vulnerability description: QNX setuid root /usr/photon/bin/phgrafx allows any non-root user to enumerate files and directories due to opendir messages. - vulnerable platforms: QNX 6.5.0SP1 QNX 6.5.0 QNX 6.4.1 QNX 6.3.0 QNX 6.2.0 -...
QNX - '.Phgrafx' File Enumeration
source: www.securityfocus.com/bid/66098/info QNX Phgrafx is prone to a file-enumeration weakness. An attacker can exploit this issue to enumerate the files present in the system's root directory; this may aid in further attacks. QNX 6.5.0 SP1, 6.5.0, 6.4.1, 6.3.0, and 6.2.0 are vulnerable; other...
McKesson Active-X 11.0.10.38 Enumeration
McKesson Rad Station ActiveX File/Variable Enumeration McKesson Rad Station File Enumeration This proof of concept will check if a file exists on the victim's machine or display the contents of an environmental variable. It uses the member OpenTextFile from DXVLauncherLib.McKLauncher and returns ...
McKesson ActiveX File/Environmental Variable Enumeration
Exploit for windows platform in category remote exploits McKesson Rad Station ActiveX File/Variable Enumeration McKesson Rad Station File Enumeration This proof of concept will check if a file exists on the victim's machine or display the contents of an environmental variable. It uses the member...
McKesson - ActiveX FileEnvironmental Variable Enumeration
McKesson - ActiveX FileEnvironmental Variable Enumeration McKesson Rad Station ActiveX File/Variable Enumeration McKesson Rad Station File Enumeration This proof of concept will check if a file exists on the victim's machine or display the contents of an environmental variable. It uses the member...
McKesson - ActiveX File/Environmental Variable Enumeration
McKesson Rad Station ActiveX File/Variable Enumeration McKesson Rad Station File Enumeration This proof of concept will check if a file exists on the victim's machine or display the contents of an environmental variable. It uses the member OpenTextFile from DXVLauncherLib.McKLauncher and returns ...
CVE-2013-3425
The Meeting Center component in Cisco WebEx 11 generates different error messages for invalid file-access attempts depending on whether a file exists, which allows remote authenticated users to enumerate files via a series of SPI calls, aka Bug ID CSCuc35965...
Command injection
The web framework in Cisco Prime Central for Hosted Collaboration Solution HCS Assurance provides different responses to requests for arbitrary pathnames depending on whether the pathname exists, which allows remote attackers to enumerate directories and files via a series of crafted requests, ak...
Microsoft IIS file enumeration vulnerability-vulnerability warning-the black bar safety net
Release date: 2012-06-30 Update date: 2012-07-03 Affected system: Microsoft IIS 7.5 Microsoft IIS 7.0 Microsoft IIS 6.0 Microsoft IIS 1.0 Description: -------------------------------------------------------------------------------- BUGTRAQ ID: 5 4 2 5 1 Internet Information Services(IIS, the...
Chevereto 1.91 - Uploadengine.php?v Traversal Arbitrary File Enumeration
Chevereto 1.91 - Uploadengine.php?v Traversal Arbitrary File Enumeration source: https://www.securityfocus.com/bid/53448/info Chevereto Image Upload Script is prone to a cross-site scripting vulnerability and an information-disclosure vulnerability because it fails to properly sanitize...