Opera < 8.02 Multiple Vulnerabilities

The remote host is using Opera, an alternative web browser. The version of Opera installed on the remote host contains several flaws. One involves imaging dragging and could result in cross-site scripting attacks and user file retrieval. A second may let attackers spoof the file extension in the...

opera -- image dragging vulnerability

A Secunia Advisory reports: Secunia Research has discovered a vulnerability in Opera, which can be exploited by malicious people to conduct cross-site scripting attacks and retrieve a user's files. The vulnerability is caused due to Opera allowing a user to drag e.g. an image, which is actually a...

CVE-2002-1861

CVE-2002-1861 concerns Sybase Enterprise Application Server 4.0 running on Windows, where a remote attacker could retrieve files from the WEB-INF directory by requesting the directory with a trailing dot (WEB-INF.). This is an information disclosure vulnerability tied to how the server handles WE...

CVE-2002-1861

Sybase Enterprise Application Server 4.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot "WEB-INF."...

CVE-2002-1856

CVE-2002-1856 affects HP Application Server 8.0 on Windows, where a remote attacker can retrieve files under the WEB-INF directory by requesting WEB-INF. with a trailing dot. The CVSS v2 base score is 5.0 (MEDIUM) with network access and low complexity, no authentication required, partial confide...

CVE-2002-1860

CVE-2002-1860 affects Pramati Server 3.0 running on Windows, where a remote attacker can disclose files under the WEB-INF directory by requesting the directory with a trailing dot ("WEB-INF."). The connected sources confirm this information disclosure vector targets the WEB-INF path and may expos...

CVE-2002-1857

CVE-2002-1857 affects jo! jo Webserver 1.0 on Windows, allowing remote retrieval of files under the WEB-INF directory by requesting WEB-INF. with a trailing dot. OpenVAS/Nessus entries describe the issue as an information-disclosure vulnerability affecting Win32 J2EE containers/app servers, with ...

CVE-2002-1857

jo! jo Webserver 1.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot "WEB-INF."...

CVE-2002-1859

Orion Application Server 1.5.3, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot "WEB-INF."...

CVE-2002-1859

CVE-2002-1859 concerns Orion Application Server 1.5.3 on Windows, where an information disclosure flaw allows remote attackers to retrieve files from the WEB-INF directory by requesting the directory with a trailing dot (WEB-INF.). The vulnerability affects requests to the WEB-INF/ path that expo...

CVE-2002-1860

Pramati Server 3.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot "WEB-INF."...

CVE-2002-1858

CVE-2002-1858 affects Oracle9i Application Server (versions 1.0.2.2 and 9.0.2 through 9.0.2.0.1) when running on Windows. It allows remote attackers to disclose contents of the WEB-INF directory (Java class files and config) by requesting the directory with a trailing dot (WEB-INF.). The connecte...

phpMyVisites.txt

================================================================== File: phpMyVisites 1.3 local file retrieval From: remote Date: 26/04/2005 Credits: Max Cerny maxatczernydotcz Vendor: http://www.phpmyvisites.net Affected version: 1.3, not tested...

CVE-2004-2047

The CVE-2004-2047 vulnerability affects EasyWeb FileManager 1.0 RC-1 for PostNuke. A directory traversal flaw in the pathext parameter allows an attacker to read arbitrary files on the server, as demonstrated by examples like ../../file. The issue is documented across multiple sources (NVD/Nessus...

[exploit] phpMyVisites 1.3 local file retrieval

================================================================== File: phpMyVisites 1.3 local file retrieval From: remote Date: 26/04/2005 Credits: Max Cerny maxatczernydotcz Vendor: http://www.phpmyvisites.net Affected version: 1.3, other not tested...

USN-78-1: Mailman vulnerability

An path traversal vulnerability has been discovered in the "private" module of Mailman. A flawed path sanitation algorithm allowed the construction of URLS to arbitrary files readable by Mailman. This allowed a remote attacker to retrieve configuration and password databases, private list archive...

Mailman mailing lists manager directory traversal

It's possible to bypass filtering with URL like .../..../// and retrieve any file from from the system...

Simple PHP Blog comments.php Traversal Arbitrary File Access

The remote version of Simple PHP Blog allows for retrieval of arbitrary files from the web server. These issues are due to a failure of the application to properly sanitize user-supplied input data. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Blog Torrent btdownload.php file Variable Traversal Arbitrary File Retrieval

There is a remote directory traversal vulnerability in log Torrent, a web-based application that allows users to host files for Bit Torrents. A malicious user can leverage this issue by requesting files outside of the web server root directory with directory traversal strings such as '../'. This...

pntresmailer 6.0 - Directory Traversal

pntresmailer 6.0 - Directory Traversal source: https://www.securityfocus.com/bid/11767/info pnTresMailer is reported susceptible to a directory traversal vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input data. This vulnerability can be...