CVE-2016-10400

Directory Traversal exists in ATutor before 2.2.2 via the icon parameter to /mods/core/courses/users/createcourse.php. The attacker can read an arbitrary file by visiting getcourseicon.php?id= after the traversal attack...

CVE-2016-10400: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal exists in ATutor before 2.2.2 via the icon parameter to /mods/core/courses/users/createcourse.php. The attacker can read an arbitrary file by visiting getcourseicon.php?id= after the traversal attack...

Atutor Arbitrary File Disclosure Vulnerability

ATutor is ATutor team developed a set of open source Web-based learning content management system . An arbitrary file disclosure vulnerability exists in Atutor. When saving data information, due to the "icon" HTTP POST passed to the "/mods/core/courses/users/createcourse.php" script, which fails ...

CVE-2002-1224

CVE-2002-1224 documents a directory traversal vulnerability in the KDE file preview component affecting KDE 3.0.1 through 3.0.3a. The flaw allows remote attackers to read arbitrary files as the kpf user by supplying a URL with a modified icon parameter. The available sources consistently describ...

CVE-2002-1224: Undefined Security Weakness

Directory traversal vulnerability in kpf for KDE 3.0.1 through KDE 3.0.3a allows remote attackers to read arbitrary files as the kpf user via a URL with a modified icon parameter...