CVE-2017-5661

In Apache FOP before 2.2, files lying on the filesystem of the server which uses FOP can be revealed to arbitrary users who send maliciously formed SVG files. The file types that can be shown depend on the user context in which the exploitable application is running. If the user is root a full...

anaconda foundation 1.4-1.9 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2338/info A vulnerability exists in Anaconda Foundation Directory which allows a remote user to traverse the filesystem of a target computer. This may lead to the disclosure of file and directory contents. Arbitrary files...

VANED LABS: icecast filesystem disclosure

listdirectory makes no effort to constrain the request to the static directory. Icecast allows for remote probing of the underlying filesystem structure. on a side note, this can also be used to list files with a .mp3 extension anywhere on the system. sendfile does do traversal checking. nc...

PerlCal 2.x - Directory Traversal

source: https://www.securityfocus.com/bid/2663/info PerlCal is a CGI script written by Acme Software that allows web-based calendar sharing and related functions. A vulnerability exists in PerlCal which can allow a remote user to traverse the filesystem of a target host. This may lead to the...

MetaProducts Offline Explorer 1.x - FileSystem Disclosure

MetaProducts Offline Explorer 1.x - FileSystem Disclosure source: https://www.securityfocus.com/bid/2084/info MetaProducts Offline Explorer is an application that allows a user to download the contents of a website or FTP site for offline browsing at a later time. It is possible to view the full...