CVE-2006-7099

The CVE-2006-7099 entry describes a directory traversal vulnerability in SolarPay’s index.php, exploitable via a .. in the read parameter to read files. Affected software is SolarPay (component: index.php handling read parameter). Underlying cause: improper validation of path input leading to una...

CVE-2006-5858

Adobe ColdFusion MX 7 through 7.0.2, and JRun 4, when run on Microsoft IIS, allows remote attackers to read arbitrary files, list directories, or read source code via a double URL-encoded NULL byte in a ColdFusion filename, such as a CFM file...

CVE-2006-5714

Easy File Sharing EFS Web Server 4.0, when running on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of a HTTP GET request, which accesses the alternate data stream...

CVE-2006-3921

Sun Java System Application Server SJSAS 7 through 8.1 and Web Server SJSWS 6.0 and 6.1 allows remote authenticated users to read files outside of the "document root directory" via a direct request using a UTF-8 encoded URI...

FarsiNews 2.5Pro Exploit

!/usr/bin/perl HESSAM-X FarsiNews 2.5Pro Exploi Exploit by Hessam-x www.hessamx.net Iran Hackerz Security Team WebSite: www.hackerz.ir Summery Name : FarsiNews www.farsinewsteam.com version : 2.5Pro in FarsiNews if you change the archive value : http://localhost/index.php?archive=hamid see :...

CVE-2002-2095

CVE-2002-2095 affects the Joe Testa hellbent 01 webserver. The vulnerability allows attackers to read files listed in the hellbent.prefs by creating a similarly named file in the web root (e.g., using index.webroot or index.ipallow). The NVD entry reports a network-accessible issue with partial c...

CVE-2005-2248

The CVE-2005-2248 entry concerns DownloadProtect prior to 1.0.3, where a directory traversal flaw could allow remote attackers to read files outside the intended download folder. Technical details from connected sources confirm the affected component and underlying issue is a path traversal in th...

CVE-2002-1684

The CVE-2002-1684 entry concerns a directory traversal vulnerability in Deerfield D2Gfx 1.0.2 and BadBlue Enterprise Edition 1.5.x plus BadBlue Personal Edition 1.5.6. The vulnerability allows remote attackers to read arbitrary files via a ../ traversal in the script used to read Microsoft Office...

CVE-2005-1439

CVE-2005-1439 : In osTicket, a directory traversal vulnerability exists in attachments.php that allows remote attackers to read arbitrary files via .. sequences in the file parameter. Evidence from multiple sources confirms a network-wide, unauthenticated remote attack vector with a base CVSS v2 ...

CVE-2005-0630

CVE-2005-0630 affects PBLang 4.63, where an authenticated remote user can read arbitrary files by supplying a full pathname in the orig parameter of sendpm.php (directory traversal). The vulnerability is classified as low risk in NVD (CVSS v2 base score 2.1; LOCAL access, low complexity, partial ...

CVE-2005-0571

PunBB 1.2.1 contains an information-disclosure flaw in admin_loader.php: the plugin parameter allows remote attackers to read arbitrary files. This is a file-read vulnerability (no user authentication required) with a CVSS base score of 5.0 (medium) per NVD, indicating network-remote access and l...

CVE-2005-0520

ArGoSoft FTP Server before 1.4.2.8 allows remote attackers to read arbitrary files via shortcut .LNK files in the SITE COPY command, a different vulnerability than CVE-2005-0519...

CVE-2004-0577

CVE-2004-0577 affects WinGate (notably 5.2.3 build 901 and 6.0 beta 2 build 942, plus 5.0.5). The vulnerability is an input-validation flaw in the wingate-internal path that allows remote, unauthenticated attackers to read arbitrary files from the root directory via a URL request to the wingate-i...

CVE-2002-1684

Directory traversal vulnerability in 1 Deerfield D2Gfx 1.0.2 or 2 BadBlue Enterprise Edition 1.5.x and BadBlue Personal Edition 1.5.6 allows remote attackers to read arbitrary files via a ../ dot dot slash in the script used to read Microsoft Office documents...

CVE-2002-1971

The ping utility in networkingutils.php in Sourcecraft NetworkingUtils 1.0 allows remote attackers to read arbitrary files via shell metacharacters in the Domain name or IP address argument...

CVE-2002-0418

Directory traversal vulnerability in the com.endymion.sake.servlet.mail.MailServlet servlet for Endymion SakeMail 1.0.36 and earlier allows remote attackers to read arbitrary files via a .. dot dot and a null character in the paramname parameter...

CVE-2001-0593

Anaconda Partners Clipper 3.3 and earlier allows a remote attacker to read arbitrary files via a '..' dot dot attack in the template parameter...

CVE-1999-1287

Technical details about CVE-1999-1287 are not publicly available in the provided connected documents. The initial description is known, but no explicit affected products, versions, or exploit information are supplied here. Monitor for updates.

CVE-2000-1196

PSCOErrPage.htm in Netscape PublishingXpert 2.5 before SP2 allows remote attackers to read arbitrary files by specifying the target file in the errPagePath parameter...

Drummond Miles A1Stats 1.0 - 'a1disp2.cgi' Traversal Arbitrary File Read

source: https://www.securityfocus.com/bid/2705/info A1Stats is a CGI product by Drummon Miles used to report on a website's visitor traffic. Versions of this product fail to properly validate user-supplied input submitted as querystrings to the A1Stats script. An attacker can compose a long path...