1428 matches found
faust Informatics FreeStyle chat 4.1 sr2 - Directory Traversal
faust Informatics FreeStyle chat 4.1 sr2 - Directory Traversal source: https://www.securityfocus.com/bid/2776/info Freestyle Chat server from Faust Informatics incorporates interactive chat functionality into websites. Versions of Freestyle Chat are vulnerable to directory traversal attacks. This...
CVE-2000-0302
Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL...
datawizard webxq 2.1.204 - Directory Traversal
datawizard webxq 2.1.204 - Directory Traversal source: https://www.securityfocus.com/bid/2660/info DataWizard WebXQ server could be led to traverse directories and possibly reveal files outside of the web root. By including '/../' sequences along with a known file or directory in requested URLs, ...
Quote generator 0.01 by Eric Persson
Hi all, Quote generator 0.01 php script by eric personn is vulnerable to the ../.. bug try this : www.yourhost.com/quote.html?filename=../../../../../../../../../../../../../ ../../../etc/issue&pathtofontfile=ariali.ttf It gives you the content of /etc/issue file regards, --- Cabezon Aurйlien...
ASPSeek.txt
Hi comrades: I'dont speak write wery good English by this reason a go to pass to describe the information that I have and I could test about this vulnerability: I know some servers whit this bug, I only test it in this type of servers but should run in others whitout problems. Tested in Server:...
Ikonboard v2.1.7b "show files" vulnerability
Product: Ikonboard - Version: 2.1.7b - OS: Unix, NT - Vendor: Notified, http://www.ikonboard.com -= Summary =- This is another bug in the Ikonboard. Anyone can read any file on the remote system with the privileges of the web server. -= Problem =- File: help.cgi ---L.44--- $inhelpon = $query -...
WhitSoft SlimServe ftpd 1.0/2.0 - Directory Traversal
source: https://www.securityfocus.com/bid/2452/info SlimServ FTPd is a free ftp server distributed and maintained by WhitSoft Development. SlimServe FTPd is designed to offer ftp services to the Microsoft Windows platform. A problem with the SlimSoft FTP daemon allows remote users to traverse...
Commerce.cgi Directory Traversal
Introduction: Commerce.cgi can have your store's catalog up and running on the web in literally a couple of hours. The easy to use Store Manager will even allow you to add and remove products from your inventory right through your web browser. Best of all, it's free, vulnerable & open source. The...
his software auktion 1.62 - Directory Traversal
source: https://www.securityfocus.com/bid/2367/info A remote user could gain read access to known files outside of the root directory where HIS Software Auktion 1.62 resides. Requesting a specially crafted URL composed of '../' sequences along with the known filename will disclose the requested...
Дырка в Watchguard Firewall
Имея доступ только на чтение можно получить ключевой файл, содержащий ключи полного доступа...
Lotus Domino Server 5.0.x - Directory Traversal (2)
Lotus Domino Server 5.0.x - Directory Traversal 2 source: https://www.securityfocus.com/bid/2173/info It is possible for a remote user to gain access to any known file residing on the Lotus Domino Server 5.0.6 and previous. A specially crafted HTTP request comprised of '.nsf' and '../' along with...
(SRADV00003) Arbitrary file disclosure through IMP
================================================= Secure Reality Pty Ltd. Security Advisory 3 SRADV00003 http://www.securereality.com.au ================================================= Title Arbitrary file disclosure through IMP Released 12/09/2000 Vulnerable Most all? versions of IMP 2.2.1...
SCO scohelhttp documentation webserver exposes local files
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ====================================================================== Defcom Labs Advisory def-2000-01 UnixWare 7 scohelphttp exposes local files Author: Olle Segerdahl [email protected] Release Date: 2000-09-11...
anyportal-0.1.txt
======================================================== AnyPortalphp-0.1 Vulnerability ======================================================== Date: 08/09/2000 Author: zorgon Web: http://www.nightbird.free.fr Introduction -------------- Secure Reality Pty Ltd. has published the Security Advisor...
netwin netauth 4.2 - Directory Traversal
netwin netauth 4.2 - Directory Traversal source: https://www.securityfocus.com/bid/1587/info A remote user is capable of gaining read access to any known file residing on a host running Netwin Netauth through directory traversal. Appending a series of '../' and the desired file name to the 'page'...
Дырка в Bajie Webserver
Можно узнать физическое расположение файлов, а обратный путь в директории позволяет получить доступ к любому файлу в системе...
CVE-2000-0672
The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly calling the administrative servlets to add a context for the root directory...
Sawmill File Access Information Disclosure
The remote web server is affected by an information disclosure vulnerability due to improper validation of user-supplied input to the 'rfcf' parameter. An unauthenticated, remote attacker can exploit this, via a crafted request, to disclose the first line of arbitrary files on the remote host...
CVE-2000-0412
CVE-2000-0412 affects the Napster-era clients (gnapster/knapster). The vulnerability allows a remote attacker to read arbitrary files on the client by specifying full pathnames, due to improper restriction to MP3 files. The NVD entry assigns a CVSSv2 base score of 7.5 (HIGH) with network attack v...