PT-2012-3650

Name of the Vulnerable Software and Affected Versions AtMail Open-Source version 1.05 and earlier Description The issue concerns the compose.php file in the @Mail WebMail Client, which does not properly handle ../ dot dot slash sequences in the unique parameter. This allows remote attackers to...

raptor: XML External Entity (XXE) attack via RDF files

Redland Raptor aka libraptor before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remote attackers to read arbitrary files via a crafted XML external entity XXE declaration and reference in an RDF document...

ManageEngine DeviceExpert <= 5.6 Directory Traversal Vulnerability - Active Check

ManageEngine DeviceExpert is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-1790

Absolute path traversal vulnerability in Webgrind 1.0 and 1.0.2 allows remote attackers to read arbitrary files via a full pathname in the file parameter to index.php...

PT-2012-1329

Name of the Vulnerable Software and Affected Versions Bitweaver versions 2.7 through 2.8.1 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the style parameter of the wiki/rankings.php file. Recommendation...

HP Data Protector Media Operations DBServer opcode 0x10 Traversal Arbitrary File Access

HP Data Protector Media Operations is affected by a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Successfully exploiting the issue may allow an attacker to obtain read arbitrary files that could aid in further attacks. %NASLMINLEVEL 70300 C...

PT-2012-3311

Name of the Vulnerable Software and Affected Versions Movable Type versions prior to 4.38 Movable Type versions 5.0x prior to 5.07 Movable Type versions 5.1x prior to 5.13 Description The issue allows remote authenticated users to conduct directory traversal attacks and read arbitrary files by...

PT-2012-3001

Name of the Vulnerable Software and Affected Versions 11in1 version 1.2.1 Description The issue allows remote attackers to read arbitrary files due to multiple directory traversal vulnerabilities. This can be achieved by including a .. dot dot in the class parameter to API endpoints such as...

PT-2012-2932

Name of the Vulnerable Software and Affected Versions myEASYbackup plugin version 1.0.8.1 Description The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the meb download.php file. This is achieved by using a .. dot dot in the dwn file parameter...

CVE-2011-4785

Directory traversal vulnerability in the HP-ChaiSOE/1.0 web server on the HP LaserJet P3015 printer with firmware before 07.080.3, LaserJet 4650 printer with firmware 07.006.0, and LaserJet 2430 printer with firmware 08.113.0I35128 allows remote attackers to read arbitrary files via unspecified...

PT-2012-1938

Name of the Vulnerable Software and Affected Versions Splunk versions 4.2.5 and earlier Description The issue allows remote attackers to read arbitrary files or execute management commands. This is possible when a Free license is selected, enabling potentially undesirable functionality within an...

CVE-2011-4644: Improper Authentication

Splunk 4.2.5 and earlier, when a Free license is selected, enables potentially undesirable functionality within an environment that intentionally does not support authentication, which allows remote attackers to 1 read arbitrary files via a management-console session that leverages the ability to...

PT-2011-4721

Name of the Vulnerable Software and Affected Versions Wuzly version 2.0 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the preview parameter to "index.php". Recommendations For Wuzly version 2.0, avoid...

CVE-2011-4831: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in webFileBrowser.php in Web File Browser 0.4b14 allows remote authenticated users to read arbitrary files via a ..%2f encoded dot dot in the file parameter in a download action...

PT-2011-5106

Name of the Vulnerable Software and Affected Versions Serv-U FTP Server versions prior to 11.1.0.5 Description A directory traversal issue allows remote authenticated users to read and write arbitrary files, and list and create arbitrary directories, by using a "..:/" dot dot colon forward slash ...

CVE-2011-4715

Directory traversal vulnerability in cgi-bin/koha/mainpage.pl in Koha 3.4 before 3.4.7 and 3.6 before 3.6.1, and LibLime Koha 4.2 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the KohaOpacLanguage cookie to cgi-bin/opac/opac-main.pl, related to Output.pm...

PT-2011-5046

Name of the Vulnerable Software and Affected Versions Namazu versions prior to 2.0.16 Description The issue allows remote attackers to read arbitrary files due to multiple directory traversal vulnerabilities in namazu.cgi. This is achieved by using a .. dot dot in the lang or result parameter...

PT-2011-5047

Name of the Vulnerable Software and Affected Versions Oxide WebServer affected versions not specified Description A directory traversal issue in Oxide WebServer allows remote attackers to read arbitrary files by including a .. dot dot backslash in an HTTP request. Recommendations At the moment,...

PT-2011-5049

Name of the Vulnerable Software and Affected Versions Virtual Vertex Muster versions prior to 6.20 Description The issue allows remote attackers to read arbitrary files by utilizing a directory traversal technique, specifically by including a .. backslash dot dot in the URL. Recommendations For...

PT-2011-5051

Name of the Vulnerable Software and Affected Versions DreamBox DM800 versions 1.6rc3, 1.5rc1, and earlier Description A directory traversal issue exists in the file component, allowing remote attackers to read arbitrary files by manipulating the file parameter. Recommendations For DreamBox DM800...