528 matches found
CVE-2013-3336
Unspecified vulnerability in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to read arbitrary files via unknown vectors...
Design/Logic Flaw
The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 allows remote attackers to read arbitrary files via a crafted external XML entity in an XML document, aka an XML Entity Expansion XEE attack...
trs inforadar arbitrary file read vulnerability-vulnerability warning-the black bar safety net
Brief description: Doing projects found inforadar arbitrary file read vulnerability Detailed description: Doing projects found inforadar arbitrary file read vulnerability /inforadar/jsp/file/filedownload. jsp? fileType=file&fileName=../../../../../../../../../../../../../../etc/passwd Vulnerabili...
CVE-2012-5574
CVE-2012-5574 affects Symfony CMS: lib/form/sfForm.class.php before 1.4.20 allows remote attackers to read arbitrary files via a crafted upload request, enabling information disclosure. The entry is confirmed across multiple feeds (NVD, Gentoo GLSA 201405-25, OpenVAS entries) and remediation is t...
Security release: symfony 1.4.20 released
symfony 1.4.20 has just been released and it contains a security fix. Uli Hecht contacted us a couple of days ago about a security issue in symfony 1.4. The vulnerability allows reading any file stored on the server if it is readable by the web server. Your application is vulnerable if there is a...
SpeedCMS intelligent enterprise website management system arbitrary file read vulnerability-vulnerability warning-the black bar safety net
inurl:article/file/cid http://xxx.com/Article/file/cid/534/?file=../../../../../../../etc/passwd ! SpeedCMS intelligent enterprise website management system arbitrary file read vulnerability...
phpcms V9 phpcms\modules\search\index.php 任意读文件
No description provided by source...
CVE-2012-1986
Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise PE Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with an authorized SSL key and certain permissions on the puppet master to read arbitrary files via a symlink attack in conjunction...
CVE-2011-0396
Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.0 before 8.05.23, 8.1 before 8.12.49, 8.2 before 8.24.1, and 8.3 before 8.32.13, when a Certificate Authority CA is configured, allow remote attackers to read arbitrary files via unspecified vectors, aka Bug ID CSCtk12352...
Oracle Document Capture Insecure READ Method
Exploit for windows platform in category remote exploits Application: Oracle Document Capture Versions Affected: 10.1350.0005 Vendor URL: http://www.oracle.com/technology/software/products/content-management/indexdc.html Bugs: Insecure READ method Exploits: YES Reported: 29.01.2010 Second report:...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities on the iSpot 2.0.0.0 R1679, and the ClearSpot 2.0.0.0 R1512 and R1786, with firmware 1.9.9.4 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary commands via the cmd parameter in an...
Default configuration
The Upload method in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9 in RealPage Module ActiveX Controls does not properly restrict certain property values, which allows remote attackers to read arbitrary files via a filename in the SourceFile property in conjunction with an ht...
CVE-2010-2239
The CVE affects Red Hat libvirt, possibly version 0.6.0 through 0.8.2. The issue arises when creating new images without setting the user-defined backing-store format, which could allow guest OS users to read arbitrary files on the host via unspecified vectors. Connected documents (e.g., openSUSE...
CVE-2010-1457
The CVE-2010-1457 issue affects GNUstep Base (tool: gdomap) where Tools/gdomap.c prints file contents in error messages, allowing local users to read arbitrary files. Affected: GNUstep Base prior to 1.20.0; root cause is error-message disclosure from -c/-a options. Consequences are local file dis...
Moa Gallery 1.2.0 - p_filename Remote File Disclosure
Moa Gallery 1.2.0 - pfilename Remote File Disclosure Moa Gallery = 1.2.0 Remote File Disclosure Vulnerability Code In sources\templateparser.php $filename = $MOAPATH."templates/".$templatename."/".$pfilename; $fp = @fopen$filename, "r"; if !$fp && isbool$fp $fp = $fp =...
e107 Plugin my_gallery 2.4.1 - 'readfile()' Local File Disclosure
Web 2 XPL : File 2 Read : "; if $POST'xpl' $data .= "GET /$vuln$trasv$file HTTP/1.1\r\n"; $data .= "Host: $host\r\n"; $data .= "Connection: close\r\n\r\n"; $html = sendpacket$host,$dat...
Design/Logic Flaw
The Windows Printing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows local users to read arbitrary files via a crafted separator page, aka "Print Spooler Read File Vulnerability."...
CVE-2008-5420
CVE-2008-5420 concerns EMC Control Center prior to 6.1, where the SAN Manager Master Agent (msragent.exe) fails to authenticate SST_SENDFILE requests. This allows remote attackers to read arbitrary files by exploiting a flaw in the SST_SENDFILE handling (service listens on TCP port 10444). The vu...