Netscape < 6.2.3 XMLHttpRequest File / Directory Disclosure

Binary data 1755.prm...

Galeon < 1.2.2 XMLHttpRequest File / Directory Disclosure

Binary data 1754.prm...

Apache Tomcat < 3.3.1a Directory Listing and File Disclosure

Binary data 1466.pasl...

Mozilla < 1.0rc2 XMLHttpRequest File / Directory Disclosure (deprecated)

Binary data 1753.prm...

CVE-2004-0778

CVE-2004-0778 affects CVS: 1.11.x before 1.11.17 and 1.12.x before 1.12.9. The flaw enables remote attackers to determine the existence of arbitrary files/directories by abusing the -X option for an alternate history file, causing different error messages to be returned. The OpenVAS-derived entri...

CVE-2004-0778

CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned...

THTTPD/Mini_HTTPD < 2.22 File Disclosure

Binary data 2121.prm...

THTTPD/Mini_HTTPD < 1.16 File Disclosure

Binary data 2122.prm...

thttpd < 2.20 Arbitrary World-Readable File Disclosure

Binary data 2120.prm...

thttpd/mini_httpd < 2.24 Virtual Hosting File Disclosure

Binary data 2125.prm...

LocalWeb2000 2.10 Crafted Request File Disclosure

Binary data 1508.prm...

thttpd/mini_httpd Virtual Hosting File Disclosure

Binary data 2124.prm...

QuiXplorer directory traversal

Title: QuiXplorer directory traversal Affects: = QuiXplorer 2.3 Effect: file disclosure, web server's user read access Id: cbsa-0003 Release Date: 2004 08 14 Author: Cyrille Barthelemy [email protected] -- 1. Introduction ------------------ From QuiXplorer documentation : "QuiXplorer is a...

rsync sanitize_path() Function Arbitrary File Disclosure

An information disclosure vulnerability exists in rsync due to improper validation of user-supplied input to the sanitizepath function. An unauthenticated, remote attacker can exploit this, via a specially crafted path, to generated an absolute filename in place of a relative filename, resulting...

FreeBSD : popfile file disclosure (152)

The following package needs to be updated: popfile %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg12c7b7aeec9011d8b913000c41e2cdad.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

popfile file disclosure

John Graham-Cumming reports that certain configurations of POPFile may allow the retrieval of any files with the extensions .gif, .png, .ico, .css, as well as some files with the extension .html...

IRM 009: RiSearch and RiSearch ProPro are vulnerable to open FTP/HTTP proxy, directory listings and file disclosure vulnerabilities

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- IRM Security Advisory No. 009 RiSearch and RiSearch ProPro are vulnerable to open FTP/HTTP proxy, directory listings and file disclosure vulnerabilities Vulnerablity Type / Importance: Network Subversion, Open Proxy, Brute-For...

Jaws 0.20.3 - Cookie Manipulation Authentication Bypass

Jaws 0.20.3 - Cookie Manipulation Authentication Bypass source: https://www.securityfocus.com/bid/10670/info JAWS is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: JAWS i...

Jaws 0.20.3 - action Cross-Site Scripting

Jaws 0.20.3 - action Cross-Site Scripting source: https://www.securityfocus.com/bid/10670/info JAWS is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: JAWS is prone to a...

Jaws 0.20.3 - gadget Traversal Arbitrary File Access

Jaws 0.20.3 - gadget Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/10670/info JAWS is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: JAWS is...