1490 matches found
CVE-2005-3680: Undefined Security Weakness
Directory traversal vulnerability in editorregistry.php in XOOPS 2.2.3 allows remote attackers to read or include arbitrary local files via a .. dot dot in the xoopsConfiglanguage parameter...
CVE-2004-2061: Server-Side Request Forgery (SSRF)
RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url parameter to a 1 http://, 2 ftp://, or 3 file:// URL...
CVE-2005-0259
CVE-2005-0259 affects phpBB 2.0.11 (and possibly other versions) where enabling remote avatars and avatar uploading allows local users to read arbitrary files by providing both a local and remote avatar location and setting the “Upload Avatar from a URL:” field to reference the target file. Root ...
CVE-2002-1270
Mac OS X 10.2.2 is affected by CVE-2002-1270: local users can read files that are intended to be writable only. The root cause is related to the map_fd() Mach system call, enabling reading of restricted files rather than only writing. The vulnerability is local, with low base score (2.1 in NVD) a...
CVE-2002-1199
The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments...
PT-2004-2957 · Isearch · Isearch +1
Name of the Vulnerable Software and Affected Versions: RiSearch version 1.0.01 RiSearch Pro version 3.2.06 Description: The issue allows remote attackers to use the show.pl script as an open proxy or read arbitrary local files by setting the url parameter to a http://, ftp://, or file:// URL...
CVE-2003-0116: Undefined Security Weakness
Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check the Cascading Style Sheet input parameter for Modal dialogs, which allows remote attackers to read files on the local system via a web page containing script that creates a dialog and then accesses the target files, aka "Modal...
CVE-2002-1291: Undefined Security Weakness
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read arbitrary local files and network shares via an applet tag with a codebase set to a "file://%00" null character URL...
HP-UX 10.20 - registrar Local Arbitrary File Read
HP-UX 10.20 - registrar Local Arbitrary File Read source: https://www.securityfocus.com/bid/1919/info The registrar service that ships with version 10.20 possibly others of HP's HP-UX operating system contains a vulnerability that may allow a local user to read any file on the hosts filesystem. T...
