phpMyAdmin < 2.6.1 pl1 Multiple Script File Inclusions

The installed version of phpMyAdmin suffers from multiple local file include flaws due to its failure to sanitize user input prior to its use in PHP 'include' and 'requireonce' calls. Specifically, a remote attacker can control values for the 'GLOBALScfgThemePath' parameter used in...

CVE-2005-0519

ArGoSoft FTP Server before 1.4.2.7 allows remote attackers to read arbitrary files by uploading a ZIP file containing a shortcut .LNK file, using SITE UNZIP to extract the .LNK file onto the server, then accessing the file, a different vulnerability than CVE-2005-0520...

CVE-2005-0507

Directory traversal vulnerability in SD Server 4.0.70 and earlier allows remote attackers to read arbitrary files via .. sequences in an HTTP request...

CVE-2004-1678

Directory traversal vulnerability in pdesk.cgi in PerlDesk allows remote attackers to read portions of arbitrary files and possibly execute arbitrary Perl modules via ".." sequences terminated by a %00 null character in the lang parameter, which can leak portions of the requested files if a...

CVE-2004-1521

Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printable encoded attachments, which makes it easier for remote attackers to read arbitrary files via spoofed "Converted" headers...

CVE-2005-0519

ArGoSoft FTP Server before 1.4.2.7 allows remote attackers to read arbitrary files by uploading a ZIP file containing a shortcut .LNK file, using SITE UNZIP to extract the .LNK file onto the server, then accessing the file, a different vulnerability than CVE-2005-0520...

Brooky CubeCart 2.0.12.0.4 - index.php?language Traversal Arbitrary File Access

Brooky CubeCart 2.0.12.0.4 - index.php?language Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/12549/info Brooky CubeCart is reported prone to multiple vulnerabilities. These issues result from insufficient sanitization of user-supplied data and may allow remote attacke...

CVE-2004-1450

Unknown vulnerability in LiveConnect in Mozilla 1.7 beta allows remote attackers to read arbitrary files in known locations...

CVE-2005-0379

Multiple directory traversal vulnerabilities in ZeroBoard 4.1pl5 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the zbpath parameter to 1 head.php or 2 outlogin.php, or the dir parameter to 3 write.php...

CVE-2004-1431

FormMail.php 5.0, and possibly other versions, allows remote attackers to read arbitrary files via a full pathname in the arfile auto-reply parameter...

Important: Red Hat Security Advisory: mailman security update

Updated mailman packages that correct a mailman security issue are now available. The mailman package is software to help manage email discussion lists. A flaw in the truepath function of Mailman was discovered. A remote attacker who is a member of a private mailman list could use a carefully...

CVE-2005-0287

Bottomline Webseries Payment Application allows remote attackers to read arbitrary files on the network via a report template with modified ReportPath or ReportName values...

RaidenHTTPd < 1.1.31 Crafted Request Remote File Access

Binary data 2594.prm...

CVE-2005-0141

Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to load local files via links "with a custom getter and toString method" that are middle-clicked by the user to be opened in a new tab...

fkey[v0.0.2]: local/remote file accessibility exploit.

nothing major, just killing some time and strolled across this project on freshmeat. original version: http://fakehalo.us/xfkey.c --------------------- exploit: xfkey.c ---------------------- / fkeyv0.0.2: local/remote file accessibility exploit. by: vade79/v9 [email protected] fakehalo/realhalo...

fkey <= 0.0.2 Local File Accessibility Exploit

Exploit for linux platform in category local exploits ============================================== fkey /savefilename bug: fkey is a finger-like daemon for accessing remote files in a specified directory. there is no limitations placed on the file acessing other than it must be a filename/path...

fkey &lt;= 0.0.2 Local File Accessibility Exploit

No description provided by source. / fkeyv0.0.2: local/remote file accessibility exploit. by: vade79/v9 [email protected] fakehalo/realhalo netris homepage/URL: http://www.freshmeat.net/projects/fkey compile: gcc xfkey.c -o xfkey syntax: ./xfkey /etc/shadow 2/savefilename bug: fkey is a finger-like...

CVE-2004-1206

Directory traversal vulnerability in codebrowserpntm.php in pnTresMailer 6.0.3 allows remote attackers to read arbitrary files via a .. dot dot in the filetodownload parameter...

CVE-2004-1230

Gadu-Gadu allows remote attackers to gain sensitive information and read files from the cache directory of other users via a DCC connection and a CTCP packet that contains a 1 as the type and a 4 as the subtype...

Jacks FormMail.php remote file access vulnerability

Security Advisory Vendor: Jack Jack's Scripts Date: 31-Dec-2004 Script: FormMail.php Site: http://dtheatre.com/scripts/formmail.php Type: Remote Severity: High Version: 5.0 maybe others Script Overview: Jacks FormMail.php script is a simple PHP script that allows web site owners to easily email...