Apache Tomcat 3.2.3/3.2.4 Source.JSP Malformed Request Information Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/4876/info Apache Tomcat is a freely available, open source web server maintained by the Apache Foundation. Under some circumstances, Tomcat may yield sensitive information about the web server configuration. When the...

httpdx 1.5 'MKD' Command Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38242/info The 'httpdx' program is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue allows an authenticated user to create directories outsi...

MyServer 0.4.1/0.4.2 HTTP Server Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7944/info The MyServer HTTP server is prone to a file disclosure vulnerability. Encoded directory traversal sequences may be used to break out of the web root directory. Attackers may gain access to files that are readabl...

Habari Blog Multiple Vulnerabilities

No description provided by source. Vulnerability ID: HTB22732 Reference: http://www.htbridge.ch/advisory/pathdisclosureinhabari.html Product: Habari Vendor: Habari http://habariproject.org/en/ Vulnerable Version: 0.6.5 Vendor Notification: 02 December 2010 Vulnerability Type: Path disclosure...

Coppermine Photo Gallery 1.x init.inc.php Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/10253/info Coppermine Photo Gallery is reported prone to multiple input-validation vulnerabilities, some of which may lead to arbitrary command execution. These issues occur because the application fails to properly...

guido frassetto sedum http server 2.0 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2335/info A remote user could gain read access to known files outside of the root directory in a SEDUM HTTP Server. Requesting a specially crafted URL composed of '../' or '.../' sequences will disclose the requested file...

Cloisterblog 1.2.2 Journal.pl Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10000/info A vulnerability has been reported to exist in Cloisterblog that may allow a remote attacker to access information outside the server root directory. The problem exists due to insufficient sanitization of...

Microsoft IIS 5.0 Indexed Directory Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1756/info If Index Server is enabled in Microsoft Internet Information Server 5.0, it is possible for a remote user to view the entire root directory structure and all sub-directories due to a flaw in the Web Distributed...

viscacha 0.8.1 - Multiple Vulnerabilities

No description provided by source. Vulnerability ID: HTB22921 Reference: http://www.htbridge.ch/advisory/sqlinjectioninviscacha.html Product: Viscacha Vendor: MaMo Net http://www.viscacha.org Vulnerable Version: 0.8.1 Vendor Notification: 24 March 2011 Vulnerability Type: SQL Injection Risk level...

AtheOS 0.3.7 Change Root Relative Path Directory Escaping Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4051/info AtheOS is a freely available, open source operating system. It is distributed under the GPL, and maintained by the AtheOS project. It is possible to escape change rooted directories on AtheOS. Due to insufficien...

Joomla KISS Advertiser Remote File & Bypass Upload Vulnerability

No description provided by source. Exploit Title: Joomla comKSAdvertiser Remote File & Bypass Upload Vulnerability Google Dork: inurl:index.php?option=comksadvertiser Date: 12-07-2012 Author: Daniel Barragan D4NB4R Twitter: @D4NB4R site: http://www.insecurityperu.org/ vendor Link:...

netserve web server 1.0.7 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9059/info It has been reported that NetServe may be prone to a directory traversal vulnerability that may allow an attacker to gain access to sensitive information. The issue presents itself due to insufficient sanitizati...

Crob FTP Server 3.5.1 - Remote Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9546/info A vulnerability has been reported in the Crob FTP server, which occurs due to a lack of validation of input from the user. By issuing a specially crafted request, a malevolent user may be able to gain access to...

SurfControl SuperScout WebFilter for windows 2000 File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5857/info SurfControl SuperScout WebFilter Reports Server is prone to a vulnerability which may allow remote attackers to disclose the contents of arbitrary files. The Reports Server does not sufficiently filter...

PhpGedView 2.x Editconfig_gedcom.php Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9529/info It has been reported that PhpGedView may be prone to a directory traversal vulnerability that may allow a remote attacker to access files outside the server root directory. The problem exists due to insufficient...

TIPS MailPost 5.1.1 - Remote File Enumeration Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11599/info TIPS MailPost is affected by a remote file enumeration vulnerability. This issue is due to a failure to properly sanitize user requests. An attacker may leverage this issue to gain knowledge of the existence of...

Working Resources BadBlue 1.2.7 Path Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2390/info Requesting a specially crafted URL to a machine running Working Resources BadBlue, will disclose the physical path to the root directory. http://target/ext.dll will result in: Error: opening c:\program...

Hand-Crafted Software FreeProxy 3.5/3.6 - FreeWeb Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9388/info It has been reported that FreeWeb server of FreeProxy may be prone to a directory traversal vulnerability that may allow a remote attacker to access information outside the server root directory. The issue may...

Kukol E.V. HTTP & FTP Server Suite 6.2 File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8564/info The web server component of Kukol E.V. HTTP & FTP Server Suite is prone to a file disclosure vulnerability. Remote web users may use directory traversal sequences in requests to gain access to files outside of t...

Way-Board 2.0 File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2370/info A remote user could gain read access to known files outside of the root directory where Way-Board resides. Requesting a specially crafted URL composed of '%00' sequences along with the known filename will disclo...