[SA19338] Baby FTP Server File Enumeration Weakness

TITLE: Baby FTP Server File Enumeration Weakness SECUNIA ADVISORY ID: SA19338 VERIFY ADVISORY: http://secunia.com/advisories/19338/ CRITICAL: Not critical IMPACT: Exposure of system information WHERE: From remote SOFTWARE: Baby FTP Server 1.x http://secunia.com/product/1626/ DESCRIPTION: Ziv Kami...

IBM AIX 5.3 - 'GetShell' / 'GetCommand' File Enumeration

source: https://www.securityfocus.com/bid/16102/info IBM AIX is prone to a local vulnerability in getShell and getCommand. This issue may let local attackers enumerate the existence of files on the computer that they wouldn't ordinarily be able to see. -bash-3.00$./getCommand.new...

IBM AIX 5.3 - GetShell GetCommand File Enumeration

IBM AIX 5.3 - GetShell GetCommand File Enumeration source: https://www.securityfocus.com/bid/16102/info IBM AIX is prone to a local vulnerability in getShell and getCommand. This issue may let local attackers enumerate the existence of files on the computer that they wouldn't ordinarily be able t...

Walla TeleSite 3.0 - ts.exe?sug SQL Injection

Walla TeleSite 3.0 - ts.exe?sug SQL Injection source: https://www.securityfocus.com/bid/15419/info Walla TeleSite is prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. Walla TeleSite is prone to information and path disclosur...

Walla TeleSite 3.0 - ts.exe?sug Cross-Site Scripting

Walla TeleSite 3.0 - ts.exe?sug Cross-Site Scripting source: https://www.securityfocus.com/bid/15419/info Walla TeleSite is prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. Walla TeleSite is prone to information and path...

Walla TeleSite 3.0 - ts.exe?tsurl Arbitrary Article Access

Walla TeleSite 3.0 - ts.exe?tsurl Arbitrary Article Access source: https://www.securityfocus.com/bid/15419/info Walla TeleSite is prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. Walla TeleSite is prone to information and...

Walla TeleSite 3.0 - 'ts.exe?sug' SQL Injection

source: https://www.securityfocus.com/bid/15419/info Walla TeleSite is prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. Walla TeleSite is prone to information and path disclosure, file enumeration, SQL injection, and...

Walla TeleSite 3.0 - 'ts.exe?tsurl' Arbitrary Article Access

source: https://www.securityfocus.com/bid/15419/info Walla TeleSite is prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. Walla TeleSite is prone to information and path disclosure, file enumeration, SQL injection, and...

Walla TeleSite 3.0 - 'ts.cgi' File Existence Enumeration

source: https://www.securityfocus.com/bid/15419/info Walla TeleSite is prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. Walla TeleSite is prone to information and path disclosure, file enumeration, SQL injection, and...

Walla TeleSite 3.0 - 'ts.exe?sug' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15419/info Walla TeleSite is prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. Walla TeleSite is prone to information and path disclosure, file enumeration, SQL injection, and...

Walla TeleSite 3.0 - ts.cgi File Existence Enumeration

Walla TeleSite 3.0 - ts.cgi File Existence Enumeration source: https://www.securityfocus.com/bid/15419/info Walla TeleSite is prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. Walla TeleSite is prone to information and path...

CVE-2002-2031

Internet Explorer 5.0, 5.0.1 and 5.5 with JavaScript execution enabled allows remote attackers to determine the existence of arbitrary files via a script tag with a src parameter that references a non-JavaScript file, then using the onError event handler to monitor the results...

CVE-2005-1201

Summary: CVE-2005-1201 affects AZ Bulletin Board (AZBB) prior to version 1.0.08. The issue comprises two directory traversal flaws: (1) restricted to remote authenticated admin users who can delete arbitrary files via a “..” in the URL to admin_avatar.php or admin_attachment.php; (2) remote attac...

Multiple Security Issues Found In AZBB

GulfTech Security Research April 19th, 2005 Vendor : AZBB URL : http://azbb.cyaccess.com/ Version : AZBB 1.0.07d && Earlier Risk : Multiple Vulnerabilities Description: azbb is a forum that was written with a primary focus on security. azbb does not require a database such as MySQL, PostGres or...

Adobe Acrobat Reader file information leak

It's possible to enumerate files...

Portcullis Security Advisory 05-006

Portcullis Security Advisory Vulnerable System: Webseries Payment Application Vulnerability Title: Directory & File Enumeration Via Reporting System Vulnerability discovery and development: Portcullis Security Testing Services Affected systems: Bottomline Webseries Payment Application Details: By...

Microsoft Windows Media Player 9.0 - ActiveX Control File Enumeration

Microsoft Windows Media Player 9.0 - ActiveX Control File Enumeration source: https://www.securityfocus.com/bid/12032/info The Windows Media Player ActiveX control is prone to a security weakness that may allow a malicious Web page to enumerate files that exist on the client computer. This could...

Microsoft Windows Media Player 9.0 - ActiveX Control File Enumeration

source: https://www.securityfocus.com/bid/12032/info The Windows Media Player ActiveX control is prone to a security weakness that may allow a malicious Web page to enumerate files that exist on the client computer. This could aid in further attacks. This issue is reported to affect Windows Media...

MailPost.exe Multiple Vulnerabilities

Binary data 2386.prm...

TIPS MailPost 5.1.1 - Remote File Enumeration

source: https://www.securityfocus.com/bid/11599/info TIPS MailPost is affected by a remote file enumeration vulnerability. This issue is due to a failure to properly sanitize user requests. An attacker may leverage this issue to gain knowledge of the existence of files outside the Web root...