CVE-2011-4643

Multiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote authenticated users to read arbitrary files via a .. dot dot in a URI to 1 Splunk Web or 2 the Splunkd HTTP Server, aka SPL-45243...

SAE Sina cloud after the end of an arbitrary file read vulnerability and fix-vulnerability warning-the black bar safety net

Describe: Sina SAE uses an unsafe third-party components, may result in any read after end of file Detailed description: http://pma.tools.sinaapp.com/ Is a mysql management client, using phpmyadmin, according to a recent 80sec in the tick published on phpmyadmin arbitrary file reading vulnerabili...

CVE-2011-4404

The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1 before Update 2 allows remote attackers to conduct directory traversal attacks and read arbitrary files via unspecified vectors, a related issue to...

CVE-2011-4107

The simplexmlloadstring function in the XML import plug-in libraries/import/xml.php in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity XXE injection...

PhpMyadmin arbitrary file reading vulnerability-vulnerability warning-the black bar safety net

PhpMyadmin to achieve the wrong using the simplexmlloadstring function for parsing xml, but this function is in default and did not deal with external entities of safety, causing the user can by means of xml files to read and access the application has permission to access system and network...

Code injection

The JavaServer Faces JSF application functionality in IBM WebSphere Application Server 8.x before 8.0.0.1 does not properly handle requests, which allows remote attackers to read unspecified files via unknown vectors...

Windows Gather Windows Host File Enumeration

This module returns a list of entries in the target system's hosts file. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Windows Host File Enumeration', 'Description' = %q This...

CVE-2011-3579

server/webmail.php in IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service CPU and memory consumption, via an XML external entity declaration in conjunction with an...

WordPress Zingiri Web Shop Plugin Remote File Inclusion Vulnerability

WordPress Zingiri Web Shop Plugin is prone to a remote file inclusion vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2011-29: Arbitrary file reading and arbitrary code execution in Router Manager for D-Link DIR-300

Positive Research Center has discovered a vulnerability that allows one to obtain content of arbitrary files and execute arbitrary code. How to fix Update your software up to the latest version Update link Advisory status 09.09.2011 - Vendor is notified 09.09.2011 - Vendor gets vulnerability...

CVE-2011-2746

Unspecified vulnerability in Kernel/Modules/AdminPackageManager.pm in OTRS-Core in Open Ticket Request System OTRS 2.x before 2.4.11 and 3.x before 3.0.10 allows remote authenticated administrators to read arbitrary files via unknown vectors...

CVE-2011-2746

CVE-2011-2746 affects Open Ticket Request System (OTRS) – specifically OTRS-Core kernel module Kernel/Modules/AdminPackageManager.pm. Affected are OTRS 2.x prior to 2.4.11 and 3.x prior to 3.0.10. The vulnerability allows remote authenticated administrators to read arbitrary files via unknown vec...

Code injection

EMC Captiva eInput 2.1.1 before 2.1.1.37 does not restrict the origin of calls to ActiveX functions, which allows remote attackers to read arbitrary files or cause a denial of service via a crafted web site...

Joomla Appointment Booking Pro Arbitrary File Reading

Appointment Booking Pro is a native Joomla component ================================= Last login: Tue Jun 7 2010 10:20:22 on ttys000 / / / / / / / / / / / / / : / / / / / / / / / / / / / / / | / / / / / / / / / / / / / // / // / / / / --X-- / / / / / / / / / / / / / / / / / / / /...

Mojolicious Directory Traversal Vulnerability

The host is running Mojolicious and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbmojoliciousdirtravvuln.nasl 7577 2017-10-26 10:41:56Z cfischer $ Mojolicious Directory Traversal Vulnerability Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone Networks Gmb...

BMC Dashboards 7.6.01 XSS / File Reading

PR10-18: Multiple XSS Cross Site Scripting and arbitrary file reading flaws within BMC Dashboards by BMC Vulnerability found: 1st Oct 2010 Vendor informed: Vulnerability fixed: Severity: High Description: BMC Dashboards provides service desk analysts with a dashboard view of aggregated performanc...

CVE-2011-1435

Google Chrome before 11.0.696.57 does not properly implement the tabs permission for extensions, which allows remote attackers to read local files via a crafted extension...

DEBIAN-CVE-2011-1589

Directory traversal vulnerability in Path.pm in Mojolicious before 1.16 allows remote attackers to read arbitrary files via a %2f..%2f encoded slash dot dot slash in a URI...

Directory traversal

Directory traversal vulnerability in Path.pm in Mojolicious before 1.16 allows remote attackers to read arbitrary files via a %2f..%2f encoded slash dot dot slash in a URI...

jHTTPd 0.1a - Directory Traversal

jHTTPd 0.1a - Directory Traversal ------------------------------------------------------------------------ Software................jHTTPd 0.1a Vulnerability...........Directory Traversal Threat Level............Serious 3/5 Download................http://developer.gauner.org/jhttpd/ Discovery...