CVE-1999-0474

The ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user's personal directory...

CVE-1999-0266

The info2www CGI script allows remote file access or remote command execution...

CVE-1999-0209

The SunView SunTools selectionsvc facility allows remote users to read files...

CVE-1999-0891

The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect...

wingate.3.0.txt

Date: Mon, 5 Apr 1999 17:52:51 -0700 From: Marc To: [email protected] Subject: Multiple WinGate VulnerabilitiesTad late At first we were just going to post this advisory to our website but after the subject came up on the NTSEC list and we got a few emails telling us to post it to...

CVE-1999-0927

NTMail allows remote attackers to read arbitrary files via a .. dot dot attack...

Compaq Client Management Agents 3.70/4.0 / Insight Management Agents 4.21 A/4.22 A/4.30 A / Intelligent Cluster Administrator 1.0 / Management Agents for Workstations 4.20 A / Server Management Agents 4.23 / Survey Utility 2.0 - Web File Access

source: https://www.securityfocus.com/bid/282/info A vulnerability in the Compaq Management Agents and the Compaq Survey Utility when running as an agent allows remote malicious users to steal local files. All Compaq Server and Client Management Agents version 4.0 or later are vulnerable. All...

CVE-1999-0738

The code.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files...

Microsoft IIS 4.0 Microsoft Site Server 3.0 - Showcode ASP

Microsoft IIS 4.0 Microsoft Site Server 3.0 - Showcode ASP source: https://www.securityfocus.com/bid/167/info A sample Active Server Page ASP script installed by default on Microsoft's Internet Information Server IIS 4.0 gives remote users access to view any file on the same volume as the web...

CVE-1999-0474

The ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user's personal directory...

CVE-1999-0467

The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter...

CVE-2000-0153

FrontPage Personal Web Server PWS allows remote attackers to read files via a .... dot dot attack...

CVE-1999-0678

A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire server...

Allaire ColdFusion Server 4.0 - Remote File Display Deletion Upload Execution

Allaire ColdFusion Server 4.0 - Remote File Display Deletion Upload Execution source: https://www.securityfocus.com/bid/115/info To display and delete any file on the system use an URL of the following form: http://www.victim.test/cfdocs/expeval/ExprCalc.cfm?OpenFilePath=C:\the\target\file To...

CVE-1999-0937

BNBForm allows remote attackers to read arbitrary files via the automessage hidden form variable...

Novell Netware Web Server 3.x - files.pl

Novell Netware Web Server 3.x - files.pl source: https://www.securityfocus.com/bid/2076/info Novell Web Server 3.x Examples Toolkit v.2 is a package containing example scripts and HTML files to help administrators design web sites. It is not a support Novell product and is provided solely as a...

CVE-1999-0897

iChat ROOMS Webserver allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-1999-1437

ePerl 2.2.12 allows remote attackers to read arbitrary files and possibly execute certain commands by specifying a full pathname of the target file as an argument to bar.phtml...

CVE-1999-0266

The info2www CGI script allows remote file access or remote command execution...

Muhammad A. Muquit wwwcount 2.3 - 'Count.cgi' Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/128/info Wwwcount count.cgi is a very popular CGI program used to track website usage. In particular, it enumerates the number of hits on given webpages and increments them on a 'counter'. In October of 1997 two remotely exploitable problems were...