ZH2004-06SA (security advisory): ShopCartCGI v2.3 Remote arbitrary file retrieving

ZH2004-06SA security advisory: ShopCartCGI v2.3 Remote arbitrary file retrieving Published: 17 february 2004 Released: 17 february 2004 Name: ShopCartCGI Affected Systems: 2.3 Issue: Remote arbitrary file retrieving Author: G00db0y from Zone-h Security Labs - [email protected] -...

ZH2004-02SA (security advisory): PJ CGI Neo review (NeoBoard review) Remote arbitrary file retrieving

ZH2004-02SA security advisory: PJ CGI Neo review NeoBoard review Remote arbitrary file retrieving Published: 29 january 2004 Released: 29 january 2004 Name: PJ CGI Neo review NeoBoard review Affected Systems: Current version Issue: Remote file retrieving Author: Zone-h Security Labs Vendor:...

ZH2004-01SA (security advisory): Web Blog 1.1 Remote arbitrary files retrieving

ZH2004-01SA security advisory: Web Blog 1.1 Remote arbitrary files retrieving Published: 28 january 2004 Released: 28 january 2004 Name: Web Blog Affected Systems: 1.1 Issue: Remote file retrieving Author: Zone-h Security Labs Vendor: http://leifwright.com Description Zone-h Security Team has...

ZH2004-02SA.txt

ZH2004-02SA security advisory: PJ CGI Neo review NeoBoard review Remote arbitrary file retrieving Published: 29 january 2004 Released: 29 january 2004 Name: PJ CGI Neo review NeoBoard review Affected Systems: Current version Issue: Remote file retrieving Author: Zone-h Security Labs Vendor:...

ZH2004-01SA.txt

ZH2004-01SA security advisory: Web Blog 1.1 Remote arbitrary files retrieving Published: 28 january 2004 Released: 28 january 2004 Name: Web Blog Affected Systems: 1.1 Issue: Remote file retrieving Author: Zone-h Security Labs Vendor: http://leifwright.com Description Zone-h Security Team has...

accipiter.txt

Severity: High Title: Accipiter Direct Server Date: January 09, 2004 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== A security vulnerability has been found in Accipiter Direct...

Avotus CDR mm Arbitrary File Retrieval

The script attempts to force the remote Avotus CDR mm service to include the file /etc/passwd accross the network. See the Nessus Scripts License for details --------------------------------------------------------------------------- This plugin has not been verified - meaning that there MIGHT be...

myPHPNuke phptonuke.php filnavn Parameter Traversal Arbitrary File Access

The version of myPHPNuke installed on the remote host allows anyone to read arbitrary files by passing the full filename to the 'filnavn' argument of the 'phptonuke.php' script. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Status: it was not tested against a vulnerable host, and the...

Path disclosure and file retrieving in AtomicBoard-0.6.2

Vendors has been contacted. Main WEB: http://cal007300.student.utwente.nl/atomicboard/ DESCRIPTION: ========================================================================= What is AtomicBoard? "An object oriented framework for building forums/weblogs" AtomicBoard is an Open Source web applicati...

atomicboard 0.6.2 - Directory Traversal

source: https://www.securityfocus.com/bid/8236/info It has been reported that attackers may be able to modify the 'location' variable passed to the index.php file to cause the Web server to return arbitrary files. This script is prone to a directory traversal vulnerability, allowing attackers to...

ZH2003-9SA (security advisory): .netCart information disclusure

ZH2003-9SA security advisory: .netCart information disclusure Published: 16/07/2003 Released: 16/07/2003 Name: .netCart Affected Systems: All versions ? Issue: Remote attackers can obtain admin information including passwords Author: [email protected] Description Zone-h Security Team has...

Trend Micro Virus Buster cgiWebupdate.exe Arbitrary File Retrieval

The CGI 'cgiWebupdate.exe' exists on this web server. Some versions of this file are vulnerable to remote exploit. An attacker can use this hole to gain access to confidential data or escalate their privileges on the web server. Note that Nessus solely relied on the existence of the...

CGIScript.net csNews.cgi Advanced Settings Multiple Parameter Arbitrary File Retrieval

The CSNews.cgi exists on this web server. Some versions of this file are vulnerable to remote exploit. An attacker can submit a specially crafted web form, which can display the 'setup.cgi' file that contains the superuser name and password. %NASLMINLEVEL 70300 This script was written by John...

Stalkerlab Mailers CGIMail.exe Arbitrary File Retrieval

The CGI 'CgiMail.exe' exists on this web server. Some versions of this file are vulnerable to remote exploit. An attacker can use this flaw to gain access to confidential data or further escalate their privileges. %NASLMINLEVEL 70300 This script was written by John [email protected] Se...

ION ion-p.exe page Parameter Traversal Arbitrary File Retrieval

The ion-p.exe exists on this web server. Some versions of this file are vulnerable to remote exploit. An attacker, exploiting this vulnerability, may be able to gain access to confidential data and/or escalate their privileges on the web server. %NASLMINLEVEL 70300 This script was written by John...

php-proxima autohtml.php Arbitrary File Retrieval

The remote host is running php-proxima, a website portal. There is a flaw in this version that allows an attacker to read arbitrary files on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: From: "Mind Warper" To: [email protected] Date: Thu, 15 May 2003 01:43:40...

Oracle E-Business Suite Report Review Agent (RRA) allows arbitrary files to be retrieved with no authentication

Overview A vulnerability in Oracle's E-Business Suite Report Review Agent RRA allows arbitrary files to be retrieved with no authentication. Description A vulnerability exists in the Oracle E-Business Suite Report Review Agent RRA. This vulnerability may allow a remote attacker to retrieve...

PHPNuke viewpage.php allows Remote File retrieving

viewpage.php is a part of PHPNuke. The Script allows an attacker to view all files on the System. Example: http://server.com/viewpage.php?file=/etc/passwd Zero X member of www.Lobnan.de...

Kebi Academy 2001 - Input Validation

source: https://www.securityfocus.com/bid/7125/info Kebi Academy 2001 does not sufficiently validate input supplied via URI parameters. As a result it has been reported that it is possible to retrieve arbitrary files which are readable by the web server. It has also been reported that it is...

Kebi Academy 2001 - Input Validation

Kebi Academy 2001 - Input Validation source: https://www.securityfocus.com/bid/7125/info Kebi Academy 2001 does not sufficiently validate input supplied via URI parameters. As a result it has been reported that it is possible to retrieve arbitrary files which are readable by the web server. It ha...