3378 matches found
CVE-2000-0188
EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. dot dot attack or execute commands via shell metacharacters...
CVE-2000-0187
EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. dot dot attack or execute commands via shell metacharacters...
Fixed in Apache Tomcat 3.1
Important: Information disclosure CVE-2000-1210 source.jsp, provided as part of the examples, allows an attacker to read arbitrary files via a .. dot dot in the argument to source.jsp. Affects: 3.0...
CVE-2000-0180
Sojourn search engine allows remote attackers to read arbitrary files via a .. dot dot attack...
Generation Terrorists Designs & Concepts Sojourn 2.0 - File Access
source: https://www.securityfocus.com/bid/1052/info Any file that the webserver has read access to can be read on a server running the Sojourn search engine. The Sojourn software includes the ability to organize a website into categories. These categories can then be accessed via the sojourn.cgi...
FreeBSD-SA-00:06.htdig
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:06 Security Advisory FreeBSD, Inc. Topic: htdig port allows remote reading of files Category: ports Module: htdig Announced: 2000-03-01 Affects: Ports collection before...
CVE-2000-0208
The htdig ht://Dig CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks in parameters to htsearch...
CVE-2000-0188
EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. dot dot attack or execute commands via shell metacharacters...
CVE-2000-0162
The Microsoft virtual machine VM in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that escapes the Java sandbox, aka the "VM File Reading" vulnerability...
CVE-2000-0132
Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function...
CVE-2000-0126
Sample Internet Data Query IDQ scripts in IIS 3 and 4 allow remote attackers to read files via a .. dot dot attack...
CVE-1999-0738
CVE-1999-0738 affects the code.asp sample file in IIS and Site Server . The vulnerability allows remote attackers to read arbitrary files via this sample file’s behavior. Documented impact is partial confidentiality loss without integrity or availability impact stated, with a CVSSv2 base score of...
CVE-1999-0238
php.cgi allows attackers to read any file on the system...
CVE-1999-0347
Affected software: Internet Explorer 4.01. Type of issue: remote read of local files and ability to spoof web pages via a "%01" character in an about: JavaScript URL, which makes IE use the domain specified after the character. Underlying cause: parsing/URL handling in about: URLs allows domain o...
CVE-1999-0736
The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files...
CVE-1999-0776
Alibaba HTTP server allows remote attackers to read files via a .. dot dot attack...
CVE-1999-0467
The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter...
CVE-1999-0737
The viewcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files...
microsoft.vm.java.txt
Jan 28, 2000 Translator's note: We announce another security hole of Microsoft Virtual Machine$B!!B Microsoft VM for Java, including the latest version. This is the translation version of the warning note written in Japanese by Dr. Hiromitsu Takagi posted at the Java House Mailing List, a Japanes...