Absolute News Manager .NET 5.1 - pagesdefault.aspx?template Remote File Access

Absolute News Manager .NET 5.1 - pagesdefault.aspx?template Remote File Access source: https://www.securityfocus.com/bid/26692/info Absolute News Manager .NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure issues...

CVE-2007-5776

The CVE-2007-5776 issue affects Blue-Collar Productions i-Gallery 3.4, where a directory traversal flaw in igallery.asp allows remote attackers to read arbitrary files by supplying encoded backslash sequences via the d parameter (example: %5c../../%5c). Multiple sources (NVD, CVE listings) confir...

FireConfig 0.5 - dl.php Remote File Disclosure

FireConfig 0.5 - dl.php Remote File Disclosure FireConfig v0.5 dl.php file Remote File Disclosure Vulnerability http://heanet.dl.sourceforge.net/sourceforge/fireconfig/fireconfigv0.5.tar.gz POC : /dl.php?file=../../../../../../etc/passwd%00 milw0rm.com 2007-10-28...

Design/Logic Flaw

Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers and ActiveResource servers to determine the existence of arbitrary files and read arbitrary XML files via the Hash.fromxml Hashfromxml method, which uses XmlSimple XML::Simple unsafely, as demonstrated by reading passwords fro...

CVE-2007-4668: Improper Restriction of Operations within the Bounds of a Memory Buffer

Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to determine the existence of arbitrary files, and possibly obtain other "file access," via unknown vectors, aka CORE-1312...

CVE-2007-2032

Cisco Wireless Control System WCS before 4.0.96.0 has a hard-coded FTP username and password for backup operations, which allows remote attackers to read and modify arbitrary files via unspecified vectors related to "properties of the FTP server," aka Bug ID CSCse93014...

CVE-2006-7083

The CVE-2006-7083 entry details a directory traversal flaw in Rigter Portal System (RPS) versions 1.0, 2.0, and 3.0 affecting index.php. An attacker can use ".." sequences in the id parameter to read arbitrary files. The description notes remote attack capability but does not provide exploit code...

Veritas Backup Exec Windows Remote File Access

This module abuses a logic flaw in the Backup Exec Windows Agent to download arbitrary files from the system. This flaw was found by someone who wishes to remain anonymous and affects all known versions of the Backup Exec Windows Agent. The output file is in 'MTF' format, which can be extracted b...

GLSA-200701-28 : thttpd: Unauthenticated remote file access

The remote host is affected by the vulnerability described in GLSA-200701-28 thttpd: Unauthenticated remote file access thttpd is vulnerable to an underlying change made to the start-stop-daemon command in the current stable Gentoo baselayout package version 1.12.6. In the new version, the...

HP Open View Network Node Manager multiple vulnerabilities

Remote file access and code execution is possible...

EditTag 1.2 - edittag.cgi?file Arbitrary File Disclosure

EditTag 1.2 - edittag.cgi?file Arbitrary File Disclosure source: https://www.securityfocus.com/bid/21890/info EditTag is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow a remote...

EditTag 1.2 - 'edittag.pl?file' Arbitrary File Disclosure

source: https://www.securityfocus.com/bid/21890/info EditTag is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow a remote attacker to access any file on the affected webserver. Versio...

EditTag 1.2 - edittag_mp.cgi?file Arbitrary File Disclosure

EditTag 1.2 - edittagmp.cgi?file Arbitrary File Disclosure source: https://www.securityfocus.com/bid/21890/info EditTag is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow a remote...

CVE-2006-6725

CVE-2006-6725 involves multiple directory traversal vulnerabilities in PHPBuilder 0.0.2 and earlier. The issue arises when an attacker supplies a .. (dot dot) in the filename parameter to lib/htm2php.php or sitetools/htm2php.php, enabling reading of arbitrary files on the server. Affected product...

raptor_orafile.sql.txt

-- $Id: raptororafile.sql,v 1.1 2006/12/19 14:21:00 raptor Exp $ -- -- raptororafile.sql - file system access suite for oracle -- Copyright c 2006 Marco Ivaldi -- -- This is an example file system access suite for Oracle based on the utlfile -- package http://www.adp-gmbh.ch/ora/plsql/utlfile.htm...

EUVD-2006-6359

Multiple directory traversal vulnerabilities in fm.php in Simple File Manager SFM 0.24a allow remote attackers to use ".." sequences to 1 read arbitrary files via the filename parameter in a download action, 2 delete arbitrary files via the delete parameter, and 3 modify arbitrary files via the...

CVE-2006-6254

administration/telecharger.php in Cahier de texte 2.0 allows remote attackers to obtain unparsed content source code of files via the chemin parameter, as demonstrated using directory traversal sequences to obtain the MySQL username and password from conncahierdetexte.php. NOTE: it is not clear...

EUVD-2006-5850

Directory traversal vulnerability in Mdoc/view-sourcecode.php for phpManta 1.0.2 and earlier allows remote attackers to read and include arbitrary files via ".." sequences in the file parameter...

Sun SunView rpc.selection_svc远程文件泄露漏洞

selectionsvc是SunOS系统下一个RPC服务。 早期SunOS系统下的的selectionsvc RPC服务程序实现上存在漏洞，允许攻击者源程读取目标系统上的任意文件。 在Sun3和Sun4系统中，远程用户可以读取任何SunView运行用户可读的文件。而在i386平台下，远程用户可以读取运行SunView的工作站上的任意文件。注意，如果root运行了SunView，那么所有的文件就都可能被远程系统所访问。...

Easy File Sharing Web Server 4 Remote Information Stealer Exploit

No description provided by source. / =================================================================== 0-day Alternative File Stream Exploit for Easy File Share Server 4 =================================================================== Exploit allows malicious users to grab files from the...