CVE-2016-5049

Directory traversal vulnerability in chat/openattach.aspx in ReadyDesk 9.1 allows remote attackers to read arbitrary files via a .. dot dot in the SESID parameter in conjunction with a filename in the FNAME parameter...

PT-2016-6228

Name of the Vulnerable Software and Affected Versions ReadyDesk version 9.1 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the SESID parameter in conjunction with a filename in the FNAME parameter in the...

PT-2014-8632

Name of the Vulnerable Software and Affected Versions WordPress Download Manager plugin for WordPress affected versions not specified Description A directory traversal issue exists in the WordPress Download Manager plugin, allowing remote attackers to read arbitrary files. This is achieved by...

CVE-2014-8585: Improper Link Resolution Before File Access

Directory traversal vulnerability in the WordPress Download Manager plugin for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the fname parameter to 1 views/filedownload.php or 2 filedownload.php...

PT-2014-4023

Name of the Vulnerable Software and Affected Versions rexx Recruitment versions R6.1 through R7 without fixes from 2014-01-15 Description The issue allows remote attackers to conduct cross-site scripting XSS attacks via the oninput event handler in the fname parameter to the default URI in "/reg"...

CVE-2014-1224: Improper Neutralization of Input During Web Page Generation

Incomplete blacklist vulnerability in the user registration feature in rexx Recruitment R6.1 and R7 without "fixes from 2014-01-15" allows remote attackers to conduct cross-site scripting XSS attacks via the oninput event handler in the fname parameter to the default URI in /reg...

CVE-2014-6619

Multiple cross-site scripting XSS vulnerabilities in register-exec.php in Restaurant Script PizzaInnProject 1.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 fname, 2 lname, or 3 login parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in register-exec.php in Restaurant Script PizzaInnProject 1.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 fname, 2 lname, or 3 login parameter...

PT-2014-7303

Name of the Vulnerable Software and Affected Versions Restaurant Script PizzaInn Project version 1.0.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the fname, lname, or login parameters in the register-exec.php file, potentially leading to cross-site...

CVE-2014-6619: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in register-exec.php in Restaurant Script PizzaInnProject 1.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 fname, 2 lname, or 3 login parameter...

SGI InfoSearch 1.0,SGI IRIX 6.5.x fname Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1031/info The InfoSearch package converts man pages and other documentation into HTML web content. The search form uses infosrch.cgi which does not properly parse user input in the 'fname' variable, allowing commands to b...

Directory traversal

Multiple directory traversal vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to read arbitrary files via the 1 tmpid parameter to websitebuilder/showtemplateimage.php, 2 fname parameter to admin/downloadfile.php, or 3 id parameter to support/admin/csvdownload.php; or ...

CVE-2013-7190

Multiple directory traversal vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to read arbitrary files via the 1 tmpid parameter to websitebuilder/showtemplateimage.php, 2 fname parameter to admin/downloadfile.php, or 3 id parameter to support/admin/csvdownload.php; or ...

PT-2013-6290

Name of the Vulnerable Software and Affected Versions iScripts AutoHoster version 2.4 Description The issue concerns multiple directory traversal vulnerabilities. These vulnerabilities allow remote attackers to read arbitrary files via specific parameters in various PHP files. The affected...

CVE-2013-7190: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to read arbitrary files via the 1 tmpid parameter to websitebuilder/showtemplateimage.php, 2 fname parameter to admin/downloadfile.php, or 3 id parameter to support/admin/csvdownload.php; or ...

PT-2012-1935

Name of the Vulnerable Software and Affected Versions SpamTitan WebTitan versions prior to 3.60 Description The issue allows remote authenticated users to read arbitrary files. This is achieved by exploiting a directory traversal vulnerability in the logs-x.php file. The vulnerability can be...

CVE-2011-4640: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in logs-x.php in SpamTitan WebTitan before 3.60 allows remote authenticated users to read arbitrary files via a .. dot dot in the fname parameter in a view action...

CVE-2012-4333: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the BackupToAvi method in the 1 UMSCtrl 1.5.1.1 and 2 UMSCtrlSTW 2.0.1.0 ActiveX controls in Samsung NET-i viewer 1.37.120316 allow remote attackers to execute arbitrary code via a long string in the fname parameter. NOTE: some of these details are obtaine...

PT-2012-5335

Name of the Vulnerable Software and Affected Versions Samsung NET-i viewer versions 1.37.120316 Description The issue is related to multiple stack-based buffer overflows in the BackupToAvi method within the UMS Ctrl and UMS Ctrl STW ActiveX controls. This allows remote attackers to execute...

CVE-2011-3686

Multiple cross-site scripting XSS vulnerabilities in myAddressBook.asp in Sonexis ConferenceManager 9.2.11.0 and 9.3.14.0 allow remote attackers to inject arbitrary web script or HTML via the 1 fname, 2 lname, 3 emailedit, 4 email, 5 email2, 6 email3, 7 sms, 8 smsid, or 9 work parameter...