CVE-2006-5569

FtpXQ Server 3.0.1 installs with two default testing accounts, which allows remote attackers to read or write arbitrary files via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

GHSA-CVGC-MX2W-H3W8 The Front End User Registration extension for TYPO3 (sr_feuser_register) allows Insecure Direct Object Reference

The srfeuserregister extension through 12.4.8 for TYPO3 allows Insecure Direct Object Reference. This allows attackers to read arbitrary files...

CVE-2009-3124

Directory traversal vulnerability in getmessage.cgi in QuarkMail allows remote attackers to read arbitrary files via a .. dot dot in the tf parameter...

CVE-2005-2147

Trac before 0.8.4 allows remote attackers to read or upload arbitrary files via a full pathname in the id parameter to the 1 upload or 2 attachment viewer scripts...

CVE-2009-3614

liboping 1.3.2 allows users reading arbitrary files upon the local system...

CVE-1999-0560

A system-critical Windows NT file or directory has inappropriate permissions...

CVE-1999-0146

The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file...

CVE-1999-0209

The SunView SunTools selectionsvc facility allows remote users to read files...

CVE-1999-0793

Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet...

CVE-1999-0739

The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files...

CVE-1999-0807

The Netscape Directory Server installation procedure leaves sensitive information in a file that is accessible to local users...

CVE-1999-0474

The ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user's personal directory...

CVE-1999-0264

htmlscript CGI program allows remote read access to files...

CVE-1999-0487

The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files...

CVE-2025-27566

Path traversal vulnerability exists in a-blog cms versions prior to Ver. 3.1.43 and versions prior to Ver. 3.0.47. This is an issue with insufficient path validation in the backup feature, and exploitation requires the administrator privilege. If this vulnerability is exploited, a remote...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : Tomcat vulnerability (USN-7525-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7525-1 advisory. It was discovered that Apache Tomcat incorrectly implemented partial PUT functionality by replacing path separators with dots ...

PT-2025-22446 · Unknown · Campcodes Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: Campcodes Online Shopping Portal version 1.0 Description: A critical vulnerability has been found in Campcodes Online Shopping Portal. This affects an unknown part of the file /admin/edit-subcategory.php. The manipulation of the productimage1...

HYPR Passwordless 安全漏洞

HYPR Passwordless is an identity security solution from HYPR. A security vulnerability exists in HYPR Passwordless versions prior to 10.1, which stems from improper link resolution prior to file access and could lead to elevation of privilege...

PT-2025-22391

Name of the Vulnerable Software and Affected Versions reint downloadmanager extension versions prior to 5.0.1 Description The issue allows Insecure Direct Object Reference, enabling remote attackers to read arbitrary files via the downloaduid parameter in the "downloadAction". Recommendations For...

PT-2025-22317 · Unknown · Project Worlds Online Time Table Generator

Name of the Vulnerable Software and Affected Versions: ProjectWorlds Online Time Table Generator version 1.0 Description: A critical issue was found in the ProjectWorlds Online Time Table Generator. The problem is related to the file /admin/add teacher.php, where the manipulation of the e argumen...