Joomla Appointment Booking Pro Arbitrary File Reading

Appointment Booking Pro is a native Joomla component ================================= Last login: Tue Jun 7 2010 10:20:22 on ttys000 / / / / / / / / / / / / / : / / / / / / / / / / / / / / / | / / / / / / / / / / / / / // / // / / / / --X-- / / / / / / / / / / / / / / / / / / / /...

Mojolicious Directory Traversal Vulnerability

The host is running Mojolicious and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbmojoliciousdirtravvuln.nasl 7577 2017-10-26 10:41:56Z cfischer $ Mojolicious Directory Traversal Vulnerability Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone Networks Gmb...

BMC Dashboards 7.6.01 XSS / File Reading

PR10-18: Multiple XSS Cross Site Scripting and arbitrary file reading flaws within BMC Dashboards by BMC Vulnerability found: 1st Oct 2010 Vendor informed: Vulnerability fixed: Severity: High Description: BMC Dashboards provides service desk analysts with a dashboard view of aggregated performanc...

CVE-2011-1435

Google Chrome before 11.0.696.57 does not properly implement the tabs permission for extensions, which allows remote attackers to read local files via a crafted extension...

DEBIAN-CVE-2011-1589

Directory traversal vulnerability in Path.pm in Mojolicious before 1.16 allows remote attackers to read arbitrary files via a %2f..%2f encoded slash dot dot slash in a URI...

Directory traversal

Directory traversal vulnerability in Path.pm in Mojolicious before 1.16 allows remote attackers to read arbitrary files via a %2f..%2f encoded slash dot dot slash in a URI...

jHTTPd 0.1a - Directory Traversal

jHTTPd 0.1a - Directory Traversal ------------------------------------------------------------------------ Software................jHTTPd 0.1a Vulnerability...........Directory Traversal Threat Level............Serious 3/5 Download................http://developer.gauner.org/jhttpd/ Discovery...

wodWebServer.NET 1.3.3 Directory Traversal

A directory traversal vulnerability in wodWebServer.NET can be exploited to read files outside of the web root. wodWebServer.NET 1.3.3 is vulnerable; other versions may also be affected. OpenVAS Vulnerability Test $Id: gbwodWebServer133.nasl 7276 2017-09-26 11:59:52Z cfischer $ wodWebServer.NET...

KLA10056 RLF vulnerability in Alcatel-Lucent OmniVista 4760

A directory traversal vulnerability was found in OmniVista. By exploiting this vulnerability malicious users can read local files. This vulnerability can be exploited from the network at a point related to NMS server via specially designed GET request. Original advisories Alcatel bulletin Related...

CVE-2011-0396

Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.0 before 8.05.23, 8.1 before 8.12.49, 8.2 before 8.24.1, and 8.3 before 8.32.13, when a Certificate Authority CA is configured, allow remote attackers to read arbitrary files via unspecified vectors, aka Bug ID CSCtk12352...

Path traversal

Absolute path traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to read arbitrary files via a...

Oracle - Document Capture Insecure READ Method

Oracle - Document Capture Insecure READ Method Source: http://packetstormsecurity.org/files/view/97872/DSECRG-11-007.txt Digital Security Research Group DSecRG Advisory DSECRG-11-007 Internal DSECRG-00117 Application: Oracle Document Capture Versions Affected: 10.1350.0005 Vendor URL:...

CVE-2010-4634

Directory traversal vulnerability in osTicket 1.6 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter to module.php, a different vector than CVE-2005-1439. NOTE: this issue has been disputed by a reliable third party...

Directory traversal

Directory traversal vulnerability in osTicket 1.6 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter to module.php, a different vector than CVE-2005-1439. NOTE: this issue has been disputed by a reliable third party...

web Thunder remote arbitrary file reading vulnerability-vulnerability warning-the black bar safety net

web Thunderbolt in the design and implementation problems, leading to a malicious attacker can read the install web Thunder user on the machine any files web Thunderbolt in the present machine there is a webserver, and the binding at 0. 0. 0. 0, while for the web request processing is not...

Google Urchin 5.7.03 - Local File Inclusion

Summary: Google Urchin is vulnerable to a Local File Include LFI vulnerability that allows arbitrary reading of files. Confirmed in version 5.7.03 running on Linux. Issue may exist in other versions as well. Analysis: During normal usage, Google Urchin creates files on disk that are then embedded...

CVE-2010-2584

The CVE-2010-2584 entry concerns the RealPage Module Upload ActiveX Control (Realpage.dll 1.0.0.9) within RealPage Module ActiveX Controls. The Upload method does not properly constrain certain property values, enabling a remote attacker to read arbitrary files by supplying a filename in the Sour...

Memory corruption

The IICAClient interface in the ICAClient library in the ICA Client ActiveX Object aka ICO component in Citrix Online Plug-in for Windows for XenApp & XenDesktop before 12.0.3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted HTML...

Microsoft Internet Explorer local file reading and detection vulnerability-vulnerability warning-the black bar safety net

Microsoft IE in the handling of local file access when there are some problems, combined with the Microsoft windows characteristics may be able to read the local of certain special files that may have other use. As the browser is inevitable to deal with cross-domain resource access issues, then t...

CVE-2010-2445

freeciv 2.2 before 2.2.1 and 2.3 before 2.3.0 allows attackers to read arbitrary files or execute arbitrary commands via a scenario that contains Lua functionality, related to the 1 os, 2 io, 3 package, 4 dofile, 5 loadfile, 6 loadlib, 7 module, and 8 require modules or functions...