Mereo 1.9.1 - Directory Traversal

source: https://www.securityfocus.com/bid/40053/info Mereo is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary local files and directories within the context of the webserver...

Mereo 1.9.1 - Directory Traversal

Mereo 1.9.1 - Directory Traversal source: https://www.securityfocus.com/bid/40053/info Mereo is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary local files and directories...

CVE-2010-1710

Directory traversal vulnerability in login.php in Siestta 2.0, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the idioma parameter...

Directory traversal

Directory traversal vulnerability in login.php in Siestta 2.0, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the idioma parameter...

Directory traversal

Directory traversal vulnerability in archeryscores.php in the Archery Scores comarcheryscores component 1.0.6 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1653

The CVE-2010-1653 entry describes a directory traversal (LFI) in Joomla!’s Graphics (com_graphics) component, specifically in graphics.php for versions 1.0.6 and 1.5.0. The vulnerability allows remote attackers to include and execute arbitrary local files by supplying a .. (dot dot) in the contro...

Mini Web Server Cross Site Scripting and Directory Traversal Vulnerabilities

Mini Web Server is prone to a directory traversal vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

CVE-2010-1607

Directory traversal vulnerability in wmi.php in the Webmoney Web Merchant Interface aka WMI or comwmi component 1.5.0 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...

Argosoft FTP Server .NET 1.0.2.1 Path Traversal

Exploit Title: Argosoft FTP SERVER .NET Version pwd 257 "/" is working directory //i'm standing on the ftp root directory ftp dir 200 Port command successful 150 Opening ASCII data connection drw-r--r-- 1 user group 0 Apr 26 18:29 tesstdir -rw-r--r-- 1 user group 0 Apr 26 18:29 testfile.txt 226...

CVE-2010-1537

Multiple directory traversal vulnerabilities in phpCDB 1.0 and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the langglobal parameter to 1 firstvisit.php, 2 newfolder.php, 3 showfolders.php, 4 newlang.php, 5 showinnerfolder.php, 6 writecode.php, a...

Directory traversal

Multiple directory traversal vulnerabilities in phpCDB 1.0 and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the langglobal parameter to 1 firstvisit.php, 2 newfolder.php, 3 showfolders.php, 4 newlang.php, 5 showinnerfolder.php, 6 writecode.php, a...

CVE-2010-1502

Unspecified vulnerability in Google Chrome before 4.1.249.1059 allows remote attackers to access local files via vectors related to "developer tools."...

CVE-2010-1502

CVE-2010-1502 affects Google Chrome versions prior to 4.1.249.1059. The description indicates an unspecified vulnerability that allows remote attackers to access local files via vectors related to the browser’s developer tools. The CVSS base score is high (9.3). Affected product: Google Chrome be...

CVE-2010-1502

Unspecified vulnerability in Google Chrome before 4.1.249.1059 allows remote attackers to access local files via vectors related to "developer tools."...

lanewsfactory - Multiple Vulnerabilities

LaNewsFactory Multiple Remote Vulnerabilities http://www.salvatorefresta.net/files/adv/LaNewsFactory%20Multiple%20Remote%20Vulnerabilities-19042010.txt Name LaNewsFactory Vendor Christophe Brocas Versions Affected = 1.0.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.n...

Directory traversal

Directory traversal vulnerability in the Picasa comjoomlapicasa2 component 2.0 and 2.0.5 for Joomla! allows remote attackers to read arbitrary local files via a .. dot dot in the controller parameter to index.php. NOTE: some of these details are obtained from third party information...

Directory traversal

Directory traversal vulnerability in index.php in justVisual CMS 2.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files directory traversal sequences in the p parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-1268

Directory traversal vulnerability in index.php in justVisual CMS 2.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files directory traversal sequences in the p parameter. NOTE: some of these details are obtained from third party information...

libnss-db unauthorized files access

It's possible to access local files with elevated privileges...

Remote file inclusion

PHP remote file inclusion vulnerability in cgi/index.php in AdvertisementManager 3.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the req parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...