KorWeblog < 1.6.2 Multiple Vulnerabilities

The remote host is using KorWeblog, a web-based log application written in PHP. According to its banner, the installed version of KorWeblog is earlier than 1.6.2. Such versions are affected by reportedly affected by several vulnerabilities that may allow execution of arbitrary PHP code or retriev...

CVE-2004-0303

OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in 1 the file parameter in /glossaries/index.php, 2 the filename parameter in /readings/index.php, or 3 the filename parameter in /multiplechoice/resultsignore.php, as demonstrated using /etc/passwd...

CVE-2004-0327

Directory traversal vulnerability in functions.php in PhpNewsManager 1.46 allows remote attackers to retrieve arbitrary files via .. dot dot sequences in the clang parameter...

CVE-2004-0293

Directory traversal vulnerability in ShopCartCGI 2.3 allows remote attackers to retrieve arbitrary files via a .. dot dot in a HTTP request to 1 gotopage.cgi or 2 genindexpage.cgi...

Samba MS-DOS Path Request Arbitrary File Retrieval

According to its version number, the remote Samba server is affected by a flaw that allows an attacker to access arbitrary files which exist outside of the shares's defined path. An attacker needs a valid account to exploit this flaw. C Tenable Network Security, Inc. include"compat.inc"; if...

Parachat 5.5 - Directory Traversal

source: https://www.securityfocus.com/bid/11272/info It is reported that ParaChat is susceptible to a directory traversal vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input data. This vulnerability allows remote attackers to retrieve the...

Keene Digital Media Server 1.0.2 - Directory Traversal

Keene Digital Media Server 1.0.2 - Directory Traversal source: https://www.securityfocus.com/bid/11057/info It is reported that DMS is susceptible to a directory traversal vulnerability. The directory traversal issue is present upon requesting files outside the webroot of the application using he...

MusicDaemon unauthorized access

It's possible to obtain any file remotely...

Web-APP.Org WebAPP 0.80.9.x - Directory Traversal

Web-APP.Org WebAPP 0.80.9.x - Directory Traversal source: https://www.securityfocus.com/bid/11028/info WebAPP is reported prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input data. An attacker can exploit this vulnerability to retriev...

Stalkerlab Mailers CGIMail.exe Arbitrary File Retrieval

Binary data 1626.prm...

BNBForm bnbform.cgi Automessage Arbitrary File Retrieval

Binary data 1643.prm...

CVS < 1.11.15 / 1.12.7 Client Traversal Arbitrary File Retrieval

Binary data 1219.prm...

popfile file disclosure

John Graham-Cumming reports that certain configurations of POPFile may allow the retrieval of any files with the extensions .gif, .png, .ico, .css, as well as some files with the extension .html...

ew_file_manager.txt

CIRT-200404: EasyWeb EW FileManager Directory Traversal Remote File Retrieval - 07/23/2004 Product: EasyWeb FileManager Module Description: EasyWeb FileManager Module for PostNuke is vulnerable to a directory traversal problem which allows retrieval of arbitrary files from the remote system...

EasyWeb FileManager Directory Traversal

Product: EasyWeb FileManager Module - http://home.postnuke.ru/index.php Description: EasyWeb FileManager Module for PostNuke is vulnerable to a directory traversal problem which allows retrieval of arbitrary files from the remote system. Systems Affected: EasyWeb FileManager 1.0 RC-1 Technical...

CVE-2004-2047

Directory traversal vulnerability in EasyWeb FileManager 1.0 RC-1 for PostNuke allows remote attackers to retrieve arbitrary files via a .. dot dot in the pathext parameter...

[Full-Disclosure] iDEFENSE Security Advisory 07.01.04: WinGate Information Disclosure Vulnerability

WinGate Information Disclosure Vulnerability iDEFENSE Security Advisory 07.01.04 www.idefense.com/application/poi/display?id=113&type=vulnerabilities July 01, 2004 I. BACKGROUND WinGate is an Internet sharing and proxy application that allows for monitoring and remote administration. More...

Business Objects Crystal Reports 9/10 Web Form Viewer - Directory Traversal

source: https://www.securityfocus.com/bid/10260/info Crystal Reports and Crystal Enterprise Web Form Viewer is prone to a directory traversal vulnerability. This issue can allow an attacker to retrieve and delete files, allowing for information disclosure and denial of service attacks. An attacke...

[NT] SurgeLDAP Web Service user.cgi File Retrieval

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVS Client Traversal Arbitrary File Retrieval

According to its version number, the remote CVS server has a directory directory traversal vulnerability. This could allow a malicious client to read files outside of the CVS root. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid12212; scriptversion "1.16";...