CVE-2001-0031: Undefined Security Weakness

BroadVision One-To-One Enterprise allows remote attackers to determine the physical path of server files by requesting a .JSP file name that does not exist...

Multiple Vulnerabilities In FaSTream FTP++ (+ ICS Tftpserver DoS)

=- Note: Be advised that below mentioned DoS can be traced back to TFtpServer. This is a beta-component of the "Internet Component Suite" for Delphi/C++ Builder, availble from http://www.overbyte.be. Other products using this component could be vulnerable, its creator has been notified. -- SNS...

CVE-2000-1240: Undefined Security Weakness

Unspecified vulnerability in siteman.php3 in AnyPortalphp before 22 APR 00 allows remote attackers to obtain sensitive information via unknown attack vectors, which reveal the absolute path. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

shop.pl.txt

Hassan Consulting's Shopping Cart Version 1.x shopping cart issues. Simple Path disclosure, directory transversal with file read ability, and listing of files in all directorys in somecases. Just depends on version of the code. VENDOR of SHOP.pl --^ Multiple holes at various patchlevels...

IBM Net.Data Local Path Disclosure Vulnerability?

Not sure if this is exactly a new issue or not, but IBM's Net.Data package often used in conjuction with NetCommerce3 and db2www will disclose the local path of server files if fed improper requests. This software is in use on a variety of sites, including several online-shopping locales. Example...

IBM Net.Data 7.0 - Full Path Disclosure

source: https://www.securityfocus.com/bid/2017/info IBM Net.Data is a scripting language used to create web applications, it supports a wide range of language environments and is compatible with most recognized databases. Net.Data contains a vulnerability which reveals server information...

IBM Net.Data 7.0 - Full Path Disclosure

IBM Net.Data 7.0 - Full Path Disclosure source: https://www.securityfocus.com/bid/2017/info IBM Net.Data is a scripting language used to create web applications, it supports a wide range of language environments and is compatible with most recognized databases. Net.Data contains a vulnerability...

McMurtreyWhitaker Associates Cart32 3.03.13.5 - Full Path Disclosure

McMurtreyWhitaker Associates Cart32 3.03.13.5 - Full Path Disclosure source : https://www.securityfocus.com/bid/1932/info Cart32 is a shopping cart application for e-commerce enabled sites. Cart32 contains a vulnerability which reveals server information. Requesting a specially crafted URL, by wa...

McMurtrey/Whitaker & Associates Cart32 3.0/3.1/3.5 - Full Path Disclosure

source : https://www.securityfocus.com/bid/1932/info Cart32 is a shopping cart application for e-commerce enabled sites. Cart32 contains a vulnerability which reveals server information. Requesting a specially crafted URL, by way of the CGI application, will reveal the physical path to the web ro...

CVE-2000-0710

The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name...

Несколько дырок в WebPlus

Различные дырки дают возможность получения полного пути к документам, получение текста исполняемых приложений и др...

CVE-2000-0759: Undefined Security Weakness

Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path...

napster.path-disclosure.txt

-------------------------------------------------- time 1:30 am date 9-18-00 affected systems: any system running napster client hasn't been tested for the gnapster client -------------------------------------------------- ADVISORY: here goes...... hi lindsay, pat, jason , and t-rex After running...

bajie.webserver.txt

More junk brought to you by the MDMA Crew Two security flaws in the Bajie Webserver Bajie is a freeware HTTP daemon written in Java and available from TuCows. We found two vulnerabilities in it... The sample Java servlet at /servlet/test/pathInfo/test gives away a real path eg. /www/html or...

CVE-2000-0554: Undefined Security Weakness

Ceilidh allows remote attackers to obtain the real path of the Ceilidh directory via the translatedpath hidden form field...

CVE-2000-0413

The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and SHTML files by requesting a file that does not exist, which generates an error message that reveals the path...

CVE-2000-0413

The vulnerability CVE-2000-0413 affects the FrontPage Server Extensions shtml.exe component in IIS 4.0/5.0. A remote attacker can trigger an error by requesting a non-existent HTML/HTM/ASP/SHTML file, causing the server to reveal the local absolute path of the web root in the error message. This ...

CVE-2000-0383

CVE-2000-0383 concerns AOL Instant Messenger’s file transfer component disclosing the sender’s local file path to the recipient. The CERT/CC entry notes this as an exposure that could enable privacy/security inferences about the sender’s machine. The description in CVE records this behavior; vend...

CVE-2000-0383: Undefined Security Weakness

The file transfer component of AOL Instant Messenger AIM reveals the physical path of the transferred file to the remote recipient...

Microsoft IIS FrontPage Server Extensions (FPSE) shtml.exe Path Disclosure

The version of FrontPage Extensions running on the remote host has an information disclosure vulnerability. Using a non-existent file as an argument to the 'shtml.exe' CGI reveals the local absolute path of the web root. A remote attacker could use this information to mount further attacks. C...