1623 matches found
CVE-2001-0454
Directory traversal vulnerability in SlimServe HTTPd 1.1a allows remote attackers to read arbitrary files via a ... modified dot dot in the HTTP request...
CVE-2001-0368
Directory traversal vulnerability in BearShare 2.2.2 and earlier allows a remote attacker to read certain files via a URL containing a series of . characters, a variation of the .. dot dot attack...
Robtex Viking Web Server permits traversal out of HTTP docs root directory
Overview Viking v1.07 is a 'multi-protocol-internet-server' available from http://www.robtex.com. A vulnerability exists with this web server which allows a remote user to see any file on the server with read permissions enabled. Description Viking v1.07 does not stop requests which traverse the...
CVE-2001-0215
ROADS search.pl program allows remote attackers to read arbitrary files by specifying the file name in the form parameter and terminating the filename with a null byte...
CVE-2001-0214
Way-board CGI program allows remote attackers to read arbitrary files by specifying the filename in the db parameter and terminating the filename with a null byte...
faust Informatics FreeStyle chat 4.1 sr2 - Directory Traversal
source: https://www.securityfocus.com/bid/2776/info Freestyle Chat server from Faust Informatics incorporates interactive chat functionality into websites. Versions of Freestyle Chat are vulnerable to directory traversal attacks. This can allow a remote user to request files from outside the norm...
CVE-2001-0454
CVE-2001-0454 describes a directory traversal vulnerability in SlimServe HTTPd 1.1a. The issue allows an unauthenticated attacker to read arbitrary files by supplying a modified dot-dot sequence in the HTTP request path. The impact is partial confidentiality (read access to files) with no indicat...
CVE-2001-0332
Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different domain using MSScriptControl.ScriptControl and...
CVE-2001-0749
Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to read arbitrary files via a webserver root directory set to system root...
CVE-2001-0480
Directory traversal vulnerability in Alex's FTP Server 0.7 allows remote attackers to read arbitrary files via a ... modified dot dot in the 1 GET or 2 CD commands...
CVE-2001-0420
Directory traversal vulnerability in talkback.cgi program allows remote attackers to read arbitrary files via a .. dot dot in the article parameter...
CVE-2001-0355
Novell Groupwise 5.5 sp1 and sp2 allows a remote user to access arbitrary files via an implementation error in Groupwise system policies...
CVE-2001-0149
Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript function and the htmlfile ActiveX object...
CVE-1999-0800
The GetFile.cfm file in Allaire Forums allows remote attackers to read files through a parameter to GetFile.cfm...
CVE-2001-0089
Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form, aka the "File Upload via Form" vulnerability...
Jason Rahaim MP3Mystic 1.0.x - Server Directory Traversal
Jason Rahaim MP3Mystic 1.0.x - Server Directory Traversal source: https://www.securityfocus.com/bid/2699/info A vulnerability exists in Jason Rahaim's MP3Mystic Server which allows a remote user to traverse the directories of a target host. This may lead to the disclosure of file and directory...
CVE-2001-0320
bbsmilies.php and bbcoderef.php in PHP-Nuke 4.4 allows remote attackers to read arbitrary files and gain PHP administrator privileges by inserting a null character and .. dot dot sequences into a malformed username argument...
CVE-2001-0202
Picserver web server allows remote attackers to read arbitrary files via a .. dot dot attack in an HTTP GET request...