Moa Gallery 1.2.0 - p_filename Remote File Disclosure

Moa Gallery 1.2.0 - pfilename Remote File Disclosure Moa Gallery = 1.2.0 Remote File Disclosure Vulnerability Code In sources\templateparser.php $filename = $MOAPATH."templates/".$templatename."/".$pfilename; $fp = @fopen$filename, "r"; if !$fp && isbool$fp $fp = $fp =...

e107 Plugin my_gallery 2.4.1 - 'readfile()' Local File Disclosure

Web 2 XPL : File 2 Read : "; if $POST'xpl' $data .= "GET /$vuln$trasv$file HTTP/1.1\r\n"; $data .= "Host: $host\r\n"; $data .= "Connection: close\r\n\r\n"; $html = sendpacket$host,$dat...

Design/Logic Flaw

The Windows Printing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows local users to read arbitrary files via a crafted separator page, aka "Print Spooler Read File Vulnerability."...

CVE-2008-5420

CVE-2008-5420 concerns EMC Control Center prior to 6.1, where the SAN Manager Master Agent (msragent.exe) fails to authenticate SST_SENDFILE requests. This allows remote attackers to read arbitrary files by exploiting a flaw in the SST_SENDFILE handling (service listens on TCP port 10444). The vu...

CVE-2008-2342

Directory traversal vulnerability in attachments.php in News Manager 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the id parameter...

CVE-2008-1782

phpdemo/viewsource.php in Advanced Software Engineering ChartDirector 4.1 allows remote attackers to read sensitive files via the file parameter...

CVE-2006-7099

The CVE-2006-7099 entry describes a directory traversal vulnerability in SolarPay’s index.php, exploitable via a .. in the read parameter to read files. Affected software is SolarPay (component: index.php handling read parameter). Underlying cause: improper validation of path input leading to una...

CVE-2006-5858

Adobe ColdFusion MX 7 through 7.0.2, and JRun 4, when run on Microsoft IIS, allows remote attackers to read arbitrary files, list directories, or read source code via a double URL-encoded NULL byte in a ColdFusion filename, such as a CFM file...

CVE-2006-5714

Easy File Sharing EFS Web Server 4.0, when running on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of a HTTP GET request, which accesses the alternate data stream...

CVE-2006-3921

Sun Java System Application Server SJSAS 7 through 8.1 and Web Server SJSWS 6.0 and 6.1 allows remote authenticated users to read files outside of the "document root directory" via a direct request using a UTF-8 encoded URI...

FarsiNews 2.5Pro Exploit

!/usr/bin/perl HESSAM-X FarsiNews 2.5Pro Exploi Exploit by Hessam-x www.hessamx.net Iran Hackerz Security Team WebSite: www.hackerz.ir Summery Name : FarsiNews www.farsinewsteam.com version : 2.5Pro in FarsiNews if you change the archive value : http://localhost/index.php?archive=hamid see :...

CVE-2002-2095

CVE-2002-2095 affects the Joe Testa hellbent 01 webserver. The vulnerability allows attackers to read files listed in the hellbent.prefs by creating a similarly named file in the web root (e.g., using index.webroot or index.ipallow). The NVD entry reports a network-accessible issue with partial c...

CVE-2005-2248

The CVE-2005-2248 entry concerns DownloadProtect prior to 1.0.3, where a directory traversal flaw could allow remote attackers to read files outside the intended download folder. Technical details from connected sources confirm the affected component and underlying issue is a path traversal in th...

CVE-2002-1684

The CVE-2002-1684 entry concerns a directory traversal vulnerability in Deerfield D2Gfx 1.0.2 and BadBlue Enterprise Edition 1.5.x plus BadBlue Personal Edition 1.5.6. The vulnerability allows remote attackers to read arbitrary files via a ../ traversal in the script used to read Microsoft Office...

CVE-2005-1439

CVE-2005-1439 : In osTicket, a directory traversal vulnerability exists in attachments.php that allows remote attackers to read arbitrary files via .. sequences in the file parameter. Evidence from multiple sources confirms a network-wide, unauthenticated remote attack vector with a base CVSS v2 ...

CVE-2005-0630

CVE-2005-0630 affects PBLang 4.63, where an authenticated remote user can read arbitrary files by supplying a full pathname in the orig parameter of sendpm.php (directory traversal). The vulnerability is classified as low risk in NVD (CVSS v2 base score 2.1; LOCAL access, low complexity, partial ...

CVE-2005-0571

PunBB 1.2.1 contains an information-disclosure flaw in admin_loader.php: the plugin parameter allows remote attackers to read arbitrary files. This is a file-read vulnerability (no user authentication required) with a CVSS base score of 5.0 (medium) per NVD, indicating network-remote access and l...

CVE-2005-0520

ArGoSoft FTP Server before 1.4.2.8 allows remote attackers to read arbitrary files via shortcut .LNK files in the SITE COPY command, a different vulnerability than CVE-2005-0519...

CVE-2004-0577

CVE-2004-0577 affects WinGate (notably 5.2.3 build 901 and 6.0 beta 2 build 942, plus 5.0.5). The vulnerability is an input-validation flaw in the wingate-internal path that allows remote, unauthenticated attackers to read arbitrary files from the root directory via a URL request to the wingate-i...

CVE-2002-1684

Directory traversal vulnerability in 1 Deerfield D2Gfx 1.0.2 or 2 BadBlue Enterprise Edition 1.5.x and BadBlue Personal Edition 1.5.6 allows remote attackers to read arbitrary files via a ../ dot dot slash in the script used to read Microsoft Office documents...