1528 matches found
CVE-2008-1281
The CVE-2008-1281 issue affects TFTPsrvs.exe 2.5.3.1 and earlier, as used in Argon Technology Client Management Services (CMS) 1.31 and earlier. The underlying vulnerability is a directory traversal via .. in the filename parameter, enabling remote attackers to read arbitrary files. Connected sou...
CVE-2008-0196: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in WordPress 2.0.11 and earlier allow remote attackers to read arbitrary files via a .. dot dot in 1 the page parameter to certain PHP scripts under wp-admin/ or 2 the import parameter to wp-admin/admin.php, as demonstrated by discovering the full path...
CVE-2007-6621: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in joovili.images.php in Joovili 3.0.0 through 3.0.6 allows remote attackers to read arbitrary files via a .. dot dot in the picture parameter...
CVE-2007-6612: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in DirHandler lib/mongrel/handlers.rb in Mongrel 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to read arbitrary files via an HTTP request containing double-encoded sequences ".%252e"...
CVE-2007-6508
Directory traversal vulnerability in view.php in xeCMS 1.0 allows remote attackers to read arbitrary files via a ..%2F dot dot slash in the list parameter...
CVE-2007-6404
Directory traversal vulnerability in Sergey Lyubka Simple HTTPD shttpd 1.38 and earlier on Windows allows remote attackers to read arbitrary files via a ..\ dot dot backslash in the URI...
CVE-2007-6368: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in ezContents 1.4.5 allows remote attackers to read arbitrary files via a .. dot dot in the link parameter...
CVE-2002-2292: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in Remote Console Applet in Halycon Software iASP 1.0.9 allows remote attackers to read arbitrary files via a .. dot dot in the HTTP request to port 9095...
CVE-2007-5484: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in wxis.exe in WWWISIS 7.1 allows local users to read arbitrary files via a .. dot dot in the IsisScript parameter to iah...
CVE-2002-2240: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in MyServer 0.11 and 0.2 allows remote attackers to read arbitrary files via a ".." dot dot in an HTTP GET request...
CVE-2002-2229: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in Sapio Design Ltd. WebReflex 1.53 allows remote attackers to read arbitrary files via a .. in an HTTP request...
CVE-2007-4369: Undefined Security Weakness
Directory traversal vulnerability in go/files in SOTEeSKLEP before 4.0 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...
CVE-2007-3714: Undefined Security Weakness
Directory traversal vulnerability in Ada Image Server ImgSvr 0.6.5 allows remote attackers to read arbitrary files via a .. dot dot in the template parameter to the default URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE...
Design/Logic Flaw
The fopen function in PHP 5.2.0 does not properly handle invalid URI handlers, which allows context-dependent attackers to bypass safemode restrictions and read arbitrary files via a file path specified with an invalid URI, as demonstrated via the srpath URI...
Directory traversal
Directory traversal vulnerability in rdwhelpers.py in rdiffWeb before 0.3.5.1 allows remote attackers to read arbitrary files via a .. dot dot in the path parameter to the /browse URI...
CVE-2007-2574: Undefined Security Weakness
Directory traversal vulnerability in index.php in Archangel Weblog 0.90.02 allows remote attackers to read arbitrary files via a .. dot dot in the index parameter...
CVE-2007-2324: Undefined Security Weakness
Directory traversal vulnerability in file.php in JulmaCMS 1.4 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...
CVE-2006-7117
Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to 1 include and execute arbitrary local files via ".." sequences in the theme cookie to index.php, which is not properly handled by includes/head.php; and 2 read arbitrary files via ".." sequences in the...
CVE-2007-1127: Undefined Security Weakness
Directory traversal vulnerability in enc/stylecss.php in shopkitplus allows remote attackers to read arbitrary files via a .. dot dot in the changetheme parameter...