Web Wiz (Multiple Products) - Remote Information Disclosure

Web Wiz Multiple Products - Remote Information Disclosure source: https://www.securityfocus.com/bid/27419/info Web Wiz Forums, NewsPad, and Rich Text Editor are prone to a remote information-disclosure vulnerability because they fail to properly sanitize user-supplied input. An attacker can explo...

MODx 0.9.6.1 - 'htcmime.php' Source Code Information Disclosure

source: https://www.securityfocus.com/bid/27096/info MODx is prone to a vulnerability that allows attackers to access source code because the application fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable syst...

ProCheckUp Security Advisory 2007.39

PR07-39: Multiple vulnerabilities on Absolute News Manager.NET 5.1 including file retrieval and SQL injection Vulnerabilities found: 16 November 2007 Vendor informed: 19 November 2007 Vulnerability fixed: 28 November 2007 Severity: High Description: Multiple vulnerabilities were found on Absolute...

PR07-39: Multiple vulnerabilities on Absolute News Manager.NET 5.1 including file retrieval and SQL injection

PR07-39: Multiple vulnerabilities on Absolute News Manager.NET 5.1 including file retrieval and SQL injection Vulnerabilities found: 16 November 2007 Vendor informed: 19 November 2007 Vulnerability fixed: 28 November 2007 Severity: High Description: Multiple vulnerabilities were found on Absolute...

Apache Tomcat WebDav directory traversal

It's possible to retrieve file by aboslute path with LOCK DAV request...

plesk 8.1.1 - 'login.php3' Directory Traversal

source: https://www.securityfocus.com/bid/23639/info Plesk is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected...

PHPFaber TopSites 3 - adminindex.php Directory Traversal

PHPFaber TopSites 3 - adminindex.php Directory Traversal source: https://www.securityfocus.com/bid/23419/info TopSites is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files...

Adobe Acrobat/Adobe Reader 7.0.9 - Information Disclosure

source: https://www.securityfocus.com/bid/22753/info Adobe Acrobat and Adobe Reader may allow remote attackers to retrieve the contents of files on a vulnerable computer. Information gathered through a successful exploit of this vulnerability may aid in other attacks...

FD Script 1.3.x - FName Information Disclosure

FD Script 1.3.x - FName Information Disclosure source: https://www.securityfocus.com/bid/22265/info FD Script is prone to an information-disclosure vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve...

FD Script 1.3.x - 'FName' Information Disclosure

source: https://www.securityfocus.com/bid/22265/info FD Script is prone to an information-disclosure vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the...

ArsDigita Community System 3.4.x - Directory Traversal

ArsDigita Community System 3.4.x - Directory Traversal source: https://www.securityfocus.com/bid/22121/info ArsDigita Community System is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve...

ArsDigita Community System 3.4.x - Directory Traversal

source: https://www.securityfocus.com/bid/22121/info ArsDigita Community System is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the conte...

[SECURITY] Fedora Core 6 Update: wget-1.10.2-8.fc6.1

GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest wit...

[SECURITY] Fedora Core 5 Update: wget-1.10.2-3.3.fc5

GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest wit...

Mono XSP 1.x2.0 - Source Code Information Disclosure

Mono XSP 1.x2.0 - Source Code Information Disclosure source: https://www.securityfocus.com/bid/21687/info XSP is prone to a source code information-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary...

Wabbit PHP Gallery 0.9 - Dir Directory Traversal

Wabbit PHP Gallery 0.9 - Dir Directory Traversal source: https://www.securityfocus.com/bid/21213/info Wabbit PHP Gallery is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to retrieve the...

Wabbit PHP Gallery 0.9 - 'Dir' Directory Traversal

source: https://www.securityfocus.com/bid/21213/info Wabbit PHP Gallery is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to retrieve the contents of arbitrary files in the context of the...

Cruiseworks 1.09 - 'Cws.exe' Doc Directory Traversal

source: https://www.securityfocus.com/bid/20698/info Cruiseworks is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context...

CakePHP 1.1.7.3363 - Vendors.php Directory Traversal

CakePHP 1.1.7.3363 - Vendors.php Directory Traversal source: https://www.securityfocus.com/bid/20150/info CakePHP is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from...

A.I-Pifou 1.8 - Choix_langue.php Directory Traversal

A.I-Pifou 1.8 - Choixlangue.php Directory Traversal source: https://www.securityfocus.com/bid/20120/info A.I-Pifou is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from...