CVE-2001-1510: Undefined Security Weakness

Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server JWS, and possibly other web servers allows remote attackers to read arbitrary files and directories by appending 1 "%3f.jsp", 2 "?.jsp" or 3 "?" to the requested URL...

CVE-2005-1957: Improper Authentication

mtnpeak.net File Upload Manager does not properly check user authentication for certain actions, which allows remote attackers to provide a modified base64-encoded file parameter and 1 read arbitrary files via the "view" action or 2 delete arbitrary files via the del action...

CVE-2004-1801: Undefined Security Weakness

Directory traversal vulnerability in PWebServer 0.3.3 allows remote attackers to read arbitrary files via a .. dot dot in the URL...

CVE-2005-1445

Multiple directory traversal vulnerabilities in SitePanel 2.6.1 and earlier SitePanel2 allows remote attackers to 1 delete arbitrary files via the id parameter in a rmattach action to 5.php, or 2 read arbitrary files via the lang parameter to index.php...

CVE-2005-0933: Undefined Security Weakness

Directory traversal vulnerability in auxpage.php for phpCOIN 1.2.1b and earlier allows remote attackers to read arbitrary files via the page parameter...

CVE-2004-1603: Improper Link Resolution Before File Access

cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to 1 read arbitrary files via the backup feature or 2 chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled...

CVE-2005-0379: Undefined Security Weakness

Multiple directory traversal vulnerabilities in ZeroBoard 4.1pl5 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the zbpath parameter to 1 head.php or 2 outlogin.php, or the dir parameter to 3 write.php...

DEBIAN-CVE-2005-0072

zhcon before 0.2 does not drop privileges before reading a user configuration file, which allows local users to read arbitrary files...

CVE-2004-1231

CVE-2004-1231 is a directory traversal vulnerability in Gadu-Gadu, allowing remote attackers to read arbitrary files via ".." sequences in a DCC/CTCP packet (type=1, subtype=4). The NVD entry confirms the vulnerability but provides no patch details in the connected documents. Impact is read acces...

CVE-2004-0302

Directory traversal vulnerability in OWLS 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the 1 file parameter in index.php, 2 editfile in glossary.php, or 3 editfile in newmultiplechoice.php...

CVE-2002-1224: Undefined Security Weakness

Directory traversal vulnerability in kpf for KDE 3.0.1 through KDE 3.0.3a allows remote attackers to read arbitrary files as the kpf user via a URL with a modified icon parameter...

CVE-2002-1534: Undefined Security Weakness

Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share...

CVE-2004-1646

Directory traversal vulnerability in Xedus 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the URL...

WebAPP Directory Traversal

There is a flaw in the remote version of WebApp fails to filter directory traversal sequences from the 'viewcat' parameter of the 'index.cgi' script. An unauthenticated attacker can leverage this issue to read arbitrary files on the remote host with the privileges of the web server process...

CVE-2003-0312

Directory traversal vulnerability in Snowblind Web Server 1.0 allows remote attackers to read arbitrary files via a .. dot dot in an HTTP request...

CVE-2000-0590

Poll It 2.0 CGI script allows remote attackers to read arbitrary files by specifying the file name in the datadir parameter...

CVE-2002-1004: Undefined Security Weakness

Directory traversal vulnerability in webmail feature of ArGoSoft Mail Server Plus or Pro 1.8.1.5 and earlier allows remote attackers to read arbitrary files via .. dot dot sequences in a URL...

CVE-2002-1525: Undefined Security Weakness

Directory traversal vulnerability in ASTAware SearchDisk engine for Sun ONE Starter Kit 2.0 allows remote attackers to read arbitrary files via a .. dot dot attack on port 1 6015 or 2 6016, or 3 an absolute pathname to port 6017...

CVE-2002-2387

Directory traversal vulnerability in Hyperion FTP server 2.8.1 allows remote attackers to read arbitrary files via a .. dot dot in the LS command...

DEBIAN-CVE-2002-1782

The default configuration of University of Washington IMAP daemon wu-imapd, when running on a system that does not allow shell access, allows a local user with a valid IMAP account to read arbitrary files as that user...