Directory traversal

Directory traversal vulnerability in the showSource function in showSource.php in World of Phaos 4.0.1 allows remote attackers to read arbitrary files via directory traversal sequences in the file parameter...

USN-593-1: Dovecot vulnerabilities

It was discovered that the default configuration of dovecot could allow access to any email files with group "mail" without verifying that a user had valid rights. An attacker able to create symlinks in their mail directory could exploit this to read or delete another user's email. CVE-2008-1199 ...

CVE-2008-1264

The Linksys WRT54G router has "admin" as its default FTP password, which allows remote attackers to access sensitive files including nvram.cfg, a file that lists all HTML documents, and an ELF executable file...

truc-disclose.txt

TRUC 0.11.0 download.php Remote File Disclosure Vulnerability http://switch.dl.sourceforge.net/sourceforge/truc/truc0.11.0.tar.gz POC : /download.php?uploadfilename=configinc.php /download.php?uploadfilename=../../../../../../../../etc/passwd Dork : TRUC 0.11.0 :: © 2006 by ASDIS : I'm TRYAGI ; -...

Mozilla Firefox 2.0 - 'chrome://' URI JavaScript File Request Information Disclosure

source: https://www.securityfocus.com/bid/27406/info Mozilla Firefox is prone to an information-disclosure vulnerability because it fails to restrict access to local JavaScript, images and stylesheets files. Attackers can exploit this issue to gain access to potentially sensitive information that...

Debian: Security Advisory (DSA-681-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Shop-Script 2.0 index.php Remote File Disclosure Vulnerability

No description provided by source. Shop-Script 2.0 index.php Remote File Disclosure Vuln Script:Shop-Script 2.0 Download : ?? AUTHOR :Fisher762 From S.M.A TEAM Contact Me: [email protected] HOME : http://www.v99x.com/vb DorKs :" Shop-Script 2.0. All rights reserved" EXPLOIT :...

DEBIAN-CVE-2007-6200

Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, excludefrom, and filter and read or write hidden files via 1 symlink, 2 partial-dir, 3 backup-dir, and unspecified 4 dest options...

Design/Logic Flaw

The remotecmds component in Apple Mac OS X 10.4 through 10.4.10 contains a symbolic link from the tftpboot private directory to the root directory, which allows tftpd users to escape the private directory and access arbitrary files...

Mozilla Firefox /Thunderbird / Seamonkey multiple security vulnerabilities

Code exectuion with invalid encoding in Windows, lcaol files accesss with sftp URL, content spoofing, user input focus stealing, memory corruption, code execution...

CVE-2007-3406

CVE-2007-3406 affects Microsoft Internet Explorer 6 on Windows XP SP2. It describes multiple absolute path traversal vulnerabilities allowing remote access to arbitrary local files via the file: URI or related attributes/tags (src in bgsound, input, EMBED, img, script; data in object; value in pa...

Sun Solaris srsexec unauthorized files accesss

By using combination of -d and -v command line options it's possible to read first line of any file...

JVN#64227086 NewsGlue and Ikinari Jijyoutsuu arbitrary script execution vulnerability

Impact An arbitrary script could be executed in NewsGlue or Ikinari Jijyoutsuu. Arbitrary files on client PCs could be accessed by an attacker. Solution Products Affected NewsGlue 1.3.3 and earlier Ikinari Jijyoutsuu version 1.0.0 and 1.0.1...

HP-UX PHSS_34871 : s700_800 11.23 OV NNM7.50 IA-64 Consolidated Patch 4

s700800 11.23 OV NNM7.50 IA-64 Consolidated Patch 4 : A potential vulnerability has been identified with HP OpenView Network Node Manager OV NNM. This vulnerability could be exploited remotely by an unauthorized user to gain read access to files with the permissions of the NNM server. %NASLMINLEV...

CVE-2006-4914

Directory traversal vulnerability in A.l-Pifou 1.8p2 allows remote attackers to read arbitrary files via ".." sequences in the zelangue02 cookie, as demonstrated by using the choixlng parameter to choixlangue.php to indirectly set the cookie, then accessing livredor.php to trigger the inclusion...

CVE-2006-4753

Directory traversal vulnerability in index.php in PHProg before 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the lang parameter...

X7 Chat <= 2.0 (help_file) Remote Commands Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "X7 Chat =2.0 "helpfile" arbitrary local inclusion\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "- works regardless of magicquotesgpc settings\r\n"; echo " if avatar...

CVE-2006-1497

Directory traversal vulnerability in index.php in ViHor Design allows remote attackers to read arbitrary files via the page parameter...

CVE-2006-1497

Directory traversal vulnerability in index.php in ViHor Design allows remote attackers to read arbitrary files via the page parameter...

NSA Group Security Advisory NSAG-№201-25.02.2006 Vulnerability SPiD v1.3.1

Advisory: NSAG-№201-25.02.2006 Research: NSA Group Russian company on Audit of safety & Network security Site of Research: http://www.nsag.ru or http://www.nsag.org Product: SPiD v1.3.1 Site of manufacturer: http://spid.adnx.net/ The status: 19/01/2006 - Publication is postponed. 14/02/2006 -...