[Full-disclosure] [vuln.sg] Cybozu Products Arbitrary File Retrieval Vulnerability

vuln.sg Vulnerability Research Advisory Cybozu Products Arbitrary File Retrieval Vulnerability by Tan Chew Keong Release Date: 2006-08-28 Summary ------- A vulnerability has been found in Cybozu Products. When exploited, the vulnerability allows an authenticated user to retrieve arbitrary files...

Directory Traversal vulnerability in IPCheck Monitor Server

Directory Traversal vulnerability in IPCheck Monitor Server -------------------------------------- Overview A directory traversal vulnerability has been identified in IPCheck Server Monitor Free/Trial/Professional, which may be exploited by potential attackers to retrieve files from the underlyin...

IPCheck Server Monitor 5.x - Directory Traversal

IPCheck Server Monitor 5.x - Directory Traversal source: https://www.securityfocus.com/bid/19473/info IPCheck Server Monitor is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary...

IPCheck Server Monitor 5.x - Directory Traversal

source: https://www.securityfocus.com/bid/19473/info IPCheck Server Monitor is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context o...

Help Center Live 2.1.2 - module.php Directory Traversal

Help Center Live 2.1.2 - module.php Directory Traversal source: https://www.securityfocus.com/bid/19256/info Help Center Live is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to retrieve arbitrary files...

SixCMS 6.0 - detail.php Directory Traversal

SixCMS 6.0 - detail.php Directory Traversal source: https://www.securityfocus.com/bid/18395/info SixCMS is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrie...

SixCMS 6.0 - 'detail.php' Directory Traversal

source: https://www.securityfocus.com/bid/18395/info SixCMS is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable syste...

Skype URI handler fails to properly parse parameters

Overview A remote attacker could potentially retrieve files from Skype users running the Microsoft Windows version of the Skype software. Description Skype is an application that allows users to communicate with voice or messaging across the Internet or local area networks. Skype also features th...

Caucho Resin 3.0.17/3.0.18 - Viewfile Information Disclosure

source: https://www.securityfocus.com/bid/18007/info Resin is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve the contents of arbitrary files from t...

timobraun Dynamic Galerie 1.0 - galerie.php?id Cross-Site Scripting

timobraun Dynamic Galerie 1.0 - galerie.php?id Cross-Site Scripting source: https://www.securityfocus.com/bid/17896/info Dynamic Galerie is prone to a directory-traversal vulnerability and a cross-site scripting vulnerability. These issues are due to a failure in the application to properly...

timobraun Dynamic Galerie 1.0 - 'galerie.php?pfad' Arbitrary Directory Listing

source: https://www.securityfocus.com/bid/17896/info Dynamic Galerie is prone to a directory-traversal vulnerability and a cross-site scripting vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these vulnerabiliti...

MODx CMS 0.9.1 - index.php Directory Traversal

MODx CMS 0.9.1 - index.php Directory Traversal source: https://www.securityfocus.com/bid/17533/info MODxCMS is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to...

Saxopress - 'URL' Directory Traversal

source: https://www.securityfocus.com/bid/17474/info SAXoPRESS is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve and execute arbitrary files from the...

BlankNBerg 0.2 - Directory Traversal

BlankNBerg 0.2 - Directory Traversal source: https://www.securityfocus.com/bid/17345/info Blank'N'Berg is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retriev...

Limbo CMS Multiple Vulnerabilities

The remote version of Limbo CMS is vulnerable to several flaws. SPDX-FileCopyrightText: 2006 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DirectContact 0.3.b - Directory Traversal

source: https://www.securityfocus.com/bid/16849/info DirectContact is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerabl...

[Full-disclosure] VSR Advisory: IBM Tivoli Access Manager - Web Server Plug-in File Retrieval Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Virtual Security Research, LLC. http://www.vsecurity.com/ Security Advisory - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Advisory Name: Remote Directory Traversal and File Retrieval Release Date: 2006-02-03...

IBM Tivoli Access Manager Plugin - Directory Traversal

IBM Tivoli Access Manager Plugin - Directory Traversal source: https://www.securityfocus.com/bid/16494/info Tivoli Access Manager Plugin for Web Servers is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An...

RCBlog 1.0.3 - 'index.php' Directory Traversal

source: https://www.securityfocus.com/bid/16342/info RCBlog is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable syste...

PHPXplorer 0.9.33 - 'Workspaces.php' Directory Traversal

source: https://www.securityfocus.com/bid/16263/info phpXplorer is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable...