Snif File Disclosure

It is possible to make the remote host return the content of any world readable file by requesting a path outside the bound HTML root directory from the Snif program. SPDX-FileCopyrightText: 2003 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

OfficeScan configuration file disclosure

Trend Micro OfficeScan Corporate Edition Japanese version: Virus Buster Corporate Edition web-based management console let anybody access /officescan/hotdownload without authentication. Reading the configuration file /officescan/hotdownload/ofcscan.ini will reveal information on your system. More...

BasiliX Arbitrary File Disclosure Vulnerability

The remote web server contains a PHP script that is prone to information disclosure. Description : The remote host appears to be running a BasiliX version 1.1.0 or lower. Such versions allow retrieval of arbitrary files that are accessible to the web server user when sending a message since they...

Music Daemon File Disclosure

The remote host is running MusicDaemon, a music player running as a server. It is possible to cause the Music Daemon to disclose the content of arbitrary files by inserting them to the list of tracks to listen to. An attacker can list the content of arbitrary files including the /etc/shadow file,...

Redhat Stronghold File System Disclosure

Redhat Stronghold Secure Server File System Disclosure Vulnerability The problem: In Redhat Stronghold from versions 2.3 up to 3.0 a flaw exists that allows a remote attacker to disclose sensitive system files including the httpd.conf file, if a restricted access to the server status report is no...

File Disclosure in osCommerce

There is a vulnerability in the osCommerce's File Manager that allows an attacker to retrieve arbitrary files from the webserver that reside outside the bounding HTML root directory. OpenVAS Vulnerability Test $Id: oscommercefilemanagerdisclosure.nasl 6053 2017-05-01 09:02:51Z teissa $ Descriptio...

Zeroboard flaws (2)

The remote web server contains several PHP scripts that are prone to arbitrary PHP code execution and file disclosure attacks. Description : The remote host runs Zeroboard, a web BBS application popular in Korea. The remote version of this CGI is vulnerable to multiple flaws which may allow an...

Apache Tomcat < 3.3.1a Directory Listing and File Disclosure Vulnerability - Active Check

Apache Tomcat is prone to a directory listing and a file disclosure vulnerability. SPDX-FileCopyrightText: 2003 A.D.Consulting Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MRTG mrtg.cgi File Disclosure

The mrtg.cgi script is part of the MRTG traffic visualization application. A vulnerability exists in this script which allows an attacker to view the first line of any file on the system. SPDX-FileCopyrightText: 2002 Digital Defense Inc. Some text descriptions might be excerpted from a referenced...

Music Daemon <= 0.0.3 File Disclosure Vulnerability

Music Daemon is prone to a file disclosure vulnerability. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

osCommerce File Disclosure Vulnerability

There is a vulnerability in the osCommerce SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oscommerce:oscommerce"; ifdescription...

WebLibs File Disclosure Vulnerability (Dec 2004) - Active Check

WebLibs is prone to a file disclosure vulnerability. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BasiliX Arbitrary File Disclosure Vulnerability

The remote web server contains a PHP script that is prone to information disclosure. Description : The remote host appears to be running a BasiliX version 1.1.0 or lower. Such versions allow retrieval of arbitrary files that are accessible to the web server user when sending a message since they...

phpMyFAQ < 1.3.12 Directory Traversal Vulnerability

The remote web server contains a PHP script that permits information disclosure of local files. The version of phpMyFAQ on the remote host contains a flaw that may lead to an unauthorized information disclosure. The problem is that user input passed to the SPDX-FileCopyrightText: 2004 David...

SecurityAlert SA025 : PHPNuke Remote Directory Traversal

Author: sp3x Date: 19. October 2005 Affected software : =================== PHPNuke version : 7.8 - 7.9 + patch 3.1 Description : ============= PHP-Nuke is a Web Portal System, storytelling software, News system, online community or w hatever you want to call it. The goal of PHP-Nuke is to have a...

EasyGuppy 4.5.44.5.5 - Printfaq.php Directory Traversal

EasyGuppy 4.5.44.5.5 - Printfaq.php Directory Traversal source: https://www.securityfocus.com/bid/14984/info EasyGuppy is prone to a directory traversal vulnerability. The application fails to properly sanitize input supplied through HTTP POST requests or cookies. Exploitation of this vulnerabili...

Alkalay.Net Multiple Scripts Arbitrary Command Execution

The remote host appears to be running at least one CGI script written by Avi Alkalay that allows attackers to execute arbitrary commands or read arbitrary files on the remote host subject to the privileges of the web server user id. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

[Full-disclosure] ContentServ features remote file disclosure

---------------------------------------------------------------------- -- ContentServ still features remote reading of arbitrary files -- ------------------------- [email protected] ------------------------ / Boring PHP bug warning: """""""""""""""""""""""""""""" By reading boring PHP bug...

Subscribe Me Pro 2.44 - S.pl Directory Traversal

Subscribe Me Pro 2.44 - S.pl Directory Traversal source: https://www.securityfocus.com/bid/14817/info Subscribe Me Pro is prone to a directory traversal vulnerability. This is due to a lack of proper sanitization of user-supplied input. Exploitation of this vulnerability could lead to a loss of...

Subscribe Me Pro 2.44 - S.pl Directory Traversal

source: https://www.securityfocus.com/bid/14817/info Subscribe Me Pro is prone to a directory traversal vulnerability. This is due to a lack of proper sanitization of user-supplied input. Exploitation of this vulnerability could lead to a loss of confidentiality as arbitrary files are disclosed t...