1657 matches found
CVE-2004-0173
Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, allows remote attackers to read arbitrary files via a URL containing "..%5C" dot dot encoded backslash sequences...
ada imgsvr 0.4 - Directory Traversal
ada imgsvr 0.4 - Directory Traversal source: https://www.securityfocus.com/bid/10048/info ImgSvr is prone to an issue that may allow an attacker to view files that reside outside of the server root directory. This issue occurs because the application fails to properly sanitize user-supplied URI...
ADA IMGSVR 0.4 - Arbitrary File Download
source: https://www.securityfocus.com/bid/10027/info A vulnerability has been reported in the ImgSvr server software that may allow a remote user to the retrieve arbitrary files from the web server root directory and any subdirectories therein. An attacker may leverage this issue to gain access t...
CVE-2004-0349
Directory traversal vulnerability in GWeb HTTP Server 0.6 allows remote attackers to view arbitrary files via a .. dot dot in the URL...
CVE-2004-0303
OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in 1 the file parameter in /glossaries/index.php, 2 the filename parameter in /readings/index.php, or 3 the filename parameter in /multiplechoice/resultsignore.php, as demonstrated using /etc/passwd...
Fools Workshop Owls Workshop 1.0 - readingsindex.php Arbitrary File Access
Fools Workshop Owls Workshop 1.0 - readingsindex.php Arbitrary File Access source: https://www.securityfocus.com/bid/9689/info Owl's Workshop is reported prone to multiple remote file-disclosure vulnerabilities because the application fails to validate user-supplied input passed via a URI...
Fools Workshop Owls Workshop 1.0 - newmultiplechoice.php Arbitrary File Access
Fools Workshop Owls Workshop 1.0 - newmultiplechoice.php Arbitrary File Access source: https://www.securityfocus.com/bid/9689/info Owl's Workshop is reported prone to multiple remote file-disclosure vulnerabilities because the application fails to validate user-supplied input passed via a URI...
Qualiteam X-Cart 3.x - Multiple Remote Information Disclosure Vulnerabilities
source: https://www.securityfocus.com/bid/9563/info X-Cart has been reported to be prone to an issue that may allow remote attackers to view any web server readable files on the affected system. The issue is caused by a failure of the application to sanitize values specified by parameters in the...
tinyserver 1.1 - Directory Traversal
tinyserver 1.1 - Directory Traversal source: https://www.securityfocus.com/bid/9485/info TinyServer is prone to multiple vulnerabilities. A directory traversal issue is present in TinyServer that could allow a remote user to view or download any file to which the server has access. A denial of...
tinyserver 1.1 - Directory Traversal
source: https://www.securityfocus.com/bid/9485/info TinyServer is prone to multiple vulnerabilities. A directory traversal issue is present in TinyServer that could allow a remote user to view or download any file to which the server has access. A denial of service issue exists due to the failure...
anteco visual technologies ownserver 1.0 - Directory Traversal
anteco visual technologies ownserver 1.0 - Directory Traversal source: https://www.securityfocus.com/bid/9461/info A vulnerability in OwnServer 1.0 and earlier has been reported that may allow a remote attacker to view files residing outside of the web server root directory on the affected system...
anteco visual technologies ownserver 1.0 - Directory Traversal
source: https://www.securityfocus.com/bid/9461/info A vulnerability in OwnServer 1.0 and earlier has been reported that may allow a remote attacker to view files residing outside of the web server root directory on the affected system. http://www.example.com/../../boot.ini...
CVE-2004-0072
Directory traversal vulnerability in Accipiter Direct Server 6.0 allows remote attackers to read arbitrary files via encoded .. backslash .., "%5c%2e%2e" sequences in an HTTP request...
CVE-2003-0817
CVE-2003-0817 involves Internet Explorer 5.01–6 SP1 and could allow a remote attacker to bypass zone restrictions and read local/arbitrary files via an XML object or through cross‑domain scripting. The vulnerability stems from how IE binds XML content and handles cross‑domain security, potentiall...
CVE-2003-0815
Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by 1 modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or 2 modifying the createRange method and using the...
HotNews arbitary file inclusion
HotNews arbitary file inclusion. ===+++===+++===+++ Product: HotNews Version: = v0.7.2 Vendor: http://sourceforge.net/projects/hotnews/ Bug discovered by: Officerrr [email protected] Vendor Response: Not contacted yet. ===+++===+++===+++ Problem 1: ===+++===+++===+++ Attacker can include a...
CVE-2003-1373
Directory traversal vulnerability in auth.php for PhpBB 1.4.0 through 1.4.4 allows remote attackers to read and include arbitrary files via .. dot dot sequences followed by NULL %00 characters in CGI parameters, as demonstrated using the lang parameter in prefs.php...
CVE-2003-1465
Directory traversal vulnerability in download.php in Phorum 3.4 through 3.4.2 allows remote attackers to read arbitrary files...