CVE-2011-1435

Google Chrome before 11.0.696.57 does not properly implement the tabs permission for extensions, which allows remote attackers to read local files via a crafted extension...

CVE-2011-1435

Removed by vendor...

PT-2011-3130

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 11.0.696.57 Description The issue is related to the improper implementation of the tabs permission for extensions in Google Chrome, allowing remote attackers to read local files via a crafted extension...

CVE-2010-4801

Directory traversal vulnerability in admin/updatelist.php in BaconMap 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the filepath parameter...

Directory traversal

Directory traversal vulnerability in admin/updatelist.php in BaconMap 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the filepath parameter...

Directory traversal

Directory traversal vulnerability in index.php in OrangeHRM 2.6.0.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the uri parameter...

CVE-2010-4801

Directory traversal vulnerability in admin/updatelist.php in BaconMap 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the filepath parameter...

PT-2011-1749

Name of the Vulnerable Software and Affected Versions BaconMap version 1.0 Description A directory traversal issue exists, allowing remote attackers to include and execute arbitrary local files. This is achieved by using a .. dot dot in the filepath parameter of the admin/updatelist.php file...

FiberHome HG-110 - Cross-Site Scripting / Directory Traversal

source: https://www.securityfocus.com/bid/47277/info Fiberhome HG-110 is prone to a cross-site scripting vulnerability and a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting these issues will allow an attacker to execute arbitrary script...

RealNetworks GameHouse InstallerDlg.dll 2.6.0.445 ActiveX Control - Multiple Vulnerabilities

RealNetworks GameHouse InstallerDlg.dll 2.6.0.445 ActiveX Control - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/47133/info GameHouse 'InstallerDlg.dll' ActiveX control is prone to multiple vulnerabilities. Successfully exploiting these issues allows the attacker to execute...

RealNetworks GameHouse 'InstallerDlg.dll' 2.6.0.445 ActiveX Control - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/47133/info GameHouse 'InstallerDlg.dll' ActiveX control is prone to multiple vulnerabilities. Successfully exploiting these issues allows the attacker to execute arbitrary commands within the context of the application typically, Internet Explorer that us...

webEdition CMS 6.1.0.2 - 'DOCUMENT_ROOT' Local File Inclusion

source: https://www.securityfocus.com/bid/47065/info webEdition CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view and execute arbitrary local files in the context of the webserver proces...

CVE-2011-0167

The windows functionality in WebKit in Apple Safari before 5.0.4 allows remote attackers to bypass the Same Origin Policy, and force the upload of arbitrary local files from a client computer, via a crafted web site...

CVE-2011-0167

The windows functionality in WebKit in Apple Safari before 5.0.4 allows remote attackers to bypass the Same Origin Policy, and force the upload of arbitrary local files from a client computer, via a crafted web site...

UBUNTU-CVE-2011-0167

The windows functionality in WebKit in Apple Safari before 5.0.4 allows remote attackers to bypass the Same Origin Policy, and force the upload of arbitrary local files from a client computer, via a crafted web site...

CVE-2011-0167

The windows functionality in WebKit in Apple Safari before 5.0.4 allows remote attackers to bypass the Same Origin Policy, and force the upload of arbitrary local files from a client computer, via a crafted web site...

KLA10058 WLF vulnerability in Altiris Notification Server

An unspecified vulnerability was found in the Symantec products. By exploiting this vulnerability malicious users can download and write local files. This vulnerability can be exploited from the network at a point related to eXpress NS SC Download. Original advisories Symantec security advisory...

Topaz Systems SigPlus Pro ActiveX Control Multiple Vulnerabilities

The host is installed with SigPlus Pro ActiveX Control and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbsigplusproactivexcontrolmultvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ Topaz Systems SigPlus Pro ActiveX Control Multiple Vulnerabilities Authors: Madhuri D...

Horde Products Local File Inclusion Vulnerability

The host is running Horde and is prone to local file inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbhordelfivuln.nasl 7029 2017-08-31 11:51:40Z teissa $ Horde Products Local File Inclusion Vulnerability Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone Networks GmbH,...

Horde LFI Vulnerability (Feb 2012) - Active Check

Horde is prone to local file inclusion LFI vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:horde:hordegroupware";...