CVE-2005-1353

The forum.pl script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1350

The ad.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1353: Undefined Security Weakness

The forum.pl script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1355: Undefined Security Weakness

includer.cgi in The Includer allows remote attackers to read arbitrary files via a full pathname in the argument, a similar vulnerability to CVE-2005-0801...

CVE-2005-1303

The citat.pl script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1295

include.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1305

The hyper.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1303: Undefined Security Weakness

The citat.pl script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1295

include.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1298

The inserter.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1238

By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows attackers to read or write arbitrary files, including sensitive QSYS databases, via a full pathname in a GET or PUT request...

CVE-2005-1303

The citat.pl script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1147

calendar.pl in CalendarScript 3.20 allows remote attackers to obtain sensitive information via invalid 1 calendar or 2 template parameters, which leaks the full pathname and debug information...

CVE-2005-1147: Undefined Security Weakness

calendar.pl in CalendarScript 3.20 allows remote attackers to obtain sensitive information via invalid 1 calendar or 2 template parameters, which leaks the full pathname and debug information...

CVE-2005-0998

The WebLinks module for PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via an invalid show parameter, which triggers a division by zero PHP error that leaks the full pathname of the server...

CVE-2005-1001

PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to 1 the Surveys module with the file parameter set to comments or 2 3D-Fantasy/theme.php, which leaks the full pathname of the web server in a PHP error message...

CVE-2005-1001: Undefined Security Weakness

PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to 1 the Surveys module with the file parameter set to comments or 2 3D-Fantasy/theme.php, which leaks the full pathname of the web server in a PHP error message...

CVE-2005-0864: Undefined Security Weakness

The Boa web server, as used in Samsung ADSL Modem SMDK8947v1.2 and possibly other products, allows remote attackers to read arbitrary files via a full pathname in the HTTP request...

CVE-2005-0733

PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to determine the existence of files via an HTTP request with a full pathname, which produces different messages whether the file exists or not...

CVE-2005-0733: Undefined Security Weakness

PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to determine the existence of files via an HTTP request with a full pathname, which produces different messages whether the file exists or not...