1623 matches found
CVE-2003-0338
Directory traversal vulnerability in WsMp3 daemon WsMp3d 0.0.10 and earlier allows remote attackers to read and execute arbitrary files via .. dot dot sequences in HTTP GET or POST requests...
php-proxima Remote File Access Vulnerability
php-proxima Remote File Access Vulnerability ---------------------- Vendor Information: ---------------------- Homepage : http://www.php-proxima.com Vendor : informed Mailed advisory: 14/05/03 Vender Response : None ---------------------- Affected Versions: ---------------------- php-proxima 6.0...
CVE-2003-0267
ShowGodLog.dll in SLWebMail 3 on Windows systems allows remote attackers to read arbitrary files by directly calling ShowGodLog.dll with an argument specifying the full path of the target file...
Alt-N WebAdmin 2.0.x - Remote File Viewing
Alt-N WebAdmin 2.0.x - Remote File Viewing source: https://www.securityfocus.com/bid/7438/info Alt-N WebAdmin allows a remote user to access files that they should not be able to access. The remote user can submit an HTTP request that will return the contents of any webserver-readable file on the...
Alt-N WebAdmin 2.0.x - Remote File Viewing
source: https://www.securityfocus.com/bid/7438/info Alt-N WebAdmin allows a remote user to access files that they should not be able to access. The remote user can submit an HTTP request that will return the contents of any webserver-readable file on the system. NOTE: The user must have...
CVE-2002-1467
Macromedia Flash Plugin before 6,0,47,0 allows remote attackers to bypass the same-domain restriction and read arbitrary files via 1 an HTTP redirect, 2 a "file://" base in a web document, or 3 a relative URL from a web archive mht file...
CVE-2002-1483
db4webc and db4webc.exe programs in DB4Web 3.4 and 3.6 allow remote attackers to read arbitrary files via an HTTP request whose argument is a filename of the form 1 C: drive letter, 2 //absolute/path double-slash, or 3 .. dot-dot...
SheerDNS multiple bugs
Buffer overflow during CNAME processing, remote file access...
Integrigy Security Advisory - Oracle Applications FNDFS Vulnerability
Integrigy Security Advisory Oracle E-Business Suite FNDFS Vulnerability April 10, 2003 Summary: The Oracle Applications FNDFS program, used to retrieve report output from the Concurrent Manager server, can be used to remotely retrieve any file from the server without operating system or applicati...
CVE-2002-1437
Directory traversal vulnerability in the web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to read arbitrary files via an HTTP request containing "..%5c" URL-encoded dot-dot backslash sequences...
CVE-2002-1430
Unknown vulnerability in Sympoll 1.2 allows remote attackers to read arbitrary files when registerglobals is enabled, possibly by modifying certain PHP variables through URL parameters...
CVE-2002-0860
The LoadText method in the spreadsheet component in Microsoft Office Web Components OWC 2000 and 2002 allows remote attackers to read arbitrary files through Internet Explorer via a URL that redirects to the target file...
CVE-2002-1039
The vulnerability CVE-2002-1039 affects Double Choco Latte (DCL) prior to 20020706. A directory traversal in the Projects: Attachments feature lets remote attackers read arbitrary files by manipulating .. sequences during file download. The impact is described as partial confidentiality loss. No ...
CVE-2002-1504
Directory traversal vulnerability in WebServer 4 Everyone 1.22 allows remote attackers to read arbitrary files via ".." dot-dot backslash sequences in a URL...
CVE-2002-0946
CVE-2002-0946 affects SeaNox Devwex prior to 1.2002.0601 and is a directory traversal vulnerability that allows remote attackers to read arbitrary files via ..\ (dot dot) sequences in an HTTP request. The issue targets the path handling in the HTTP interface and results in partial confidentiality...
CVE-2002-1515
Directory traversal vulnerability in avatar.php in CoolForum 0.5 beta allows remote attackers to read arbitrary files via .. dot dot sequences in the img parameter...
CVE-2002-1525
Directory traversal vulnerability in ASTAware SearchDisk engine for Sun ONE Starter Kit 2.0 allows remote attackers to read arbitrary files via a .. dot dot attack on port 1 6015 or 2 6016, or 3 an absolute pathname to port 6017...
CVE-2002-0543
Directory traversal vulnerability in Aprelium Abyss Web Server abyssws before 1.0.0.2 allows remote attackers to read files outside the web root, including the abyss.conf file, via URL-encoded .. dot dot sequences in the HTTP request...
CVE-2002-0531
Directory traversal vulnerability in emumail.cgi in EMU Webmail 4.5.x and 5.1.0 allows remote attackers to read arbitrary files or list arbitrary directories via a .. dot dot in the type parameter...