DataWizard FTPXQ Default Accounts

The remote FTP server has one or more default test accounts. Description : The version of DataWizard FTPXQ that is installed on the remote host has one or more default accounts setup which can allow an attacker to read and/or write arbitrary files on the system. OpenVAS Vulnerability Test $Id:...

CVE-2007-6672

Mortbay Jetty 6.1.5 and 6.1.6 allows remote attackers to bypass protection mechanisms and read the source of files via multiple '/' slash characters in the URI...

security flaw

Cross-zone vulnerability in Mozilla Firefox 1.5.0.9 considers blocked popups to have an internal zone origin, which allows user-assisted remote attackers to cross zone restrictions and read arbitrary file:// URIs by convincing a user to show a blocked popup...

security flaw

Cross-zone vulnerability in Mozilla Firefox 1.5.0.9 considers blocked popups to have an internal zone origin, which allows user-assisted remote attackers to cross zone restrictions and read arbitrary file:// URIs by convincing a user to show a blocked popup...

Thepeak File Upload v1.3 : Read file vulneability

Thepeak File Upload v1.3 : Read file vulneability Discovered By: Phm c Hi Pham Duc Hai Email: duchaikhtn at gmail dot com YIM : kikicoco1985vn Website: http://blog.ajaxviet.com ------------------------- Description: file upload manager 1.3 written by thepeak adam medici copyright c 2003 thepeak o...

DEBIAN-CVE-2006-1062

Unspecified vulnerability in lurker.cgi for Lurker 2.0 and earlier allows attackers to read arbitrary files via unknown vectors...

Novell Groupwise WebAcc Information Disclosure

Novell Groupwise WebAcc Servlet is installed. This servlet exposes critical system information, and allows remote attackers to read any file. SPDX-FileCopyrightText: 2001 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

hpjadmadv.txt

Product: HP Web JetAdmin Version 7.5.2546 Others that use this codebase assumed vulnerable Note: Only tested on the Windows Platform. Vulnerability: Denial of Service, Upload Any file to the filesystem to a known location, Write to any file on the file system, Read any file from the filesystem...

[RHSA-2003:258-01] GDM allows local user to read any file.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: GDM allows local user to read any file. Advisory ID: RHSA-2003:258-01 Issue date: 2003-08-21 Updated on: 2003-08-21 Product: Red Hat Linux...

Drummond Miles A1Stats 1.0 - 'a1disp3.cgi' Traversal Arbitrary File Read

source: https://www.securityfocus.com/bid/2705/info A1Stats is a CGI product by Drummon Miles used to report on a website's visitor traffic. Versions of this product fail to properly validate user-supplied input submitted as querystrings to the A1Stats script. An attacker can compose a long path...

ssibug

ssi server sides include is a cgi proggie that comes by default with thttpd web server, I am not sure about others. ssi has a nasty bug with regards to the PATHTRANSLATED env var. As you can see the contents of PATHTRANSLATED get copied into pathtranslated which get's fopen'ed later. It does no...

PT-1993-1000 · University Of Minnesota · Gopherd +1

Name of the Vulnerable Software and Affected Versions: UMN gopher and gopher+ versions 1.12 and 2.0x Description: The issue allows an intruder to read any files that can be accessed by the gopher daemon. Recommendations: For UMN gopher and gopher+ versions 1.12, update to a version that fixes thi...