735 matches found
PJ CGI Neo Review Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9524/info It has been reported that PJ CGI Neo Review may be prone to a directory traversal vulnerability that may allow a remote attacker to access information outside the server root directory by using '../' character...
File Transfer 1.2 - Request File Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28453/info File Transfer is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue allows an attacker to access arbitrary files outside of th...
MyServer 0.4.1/0.4.2 HTTP Server Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7944/info The MyServer HTTP server is prone to a file disclosure vulnerability. Encoded directory traversal sequences may be used to break out of the web root directory. Attackers may gain access to files that are readabl...
viscacha 0.8.1 - Multiple Vulnerabilities
No description provided by source. Vulnerability ID: HTB22921 Reference: http://www.htbridge.ch/advisory/sqlinjectioninviscacha.html Product: Viscacha Vendor: MaMo Net http://www.viscacha.org Vulnerable Version: 0.8.1 Vendor Notification: 24 March 2011 Vulnerability Type: SQL Injection Risk level...
Coppermine Photo Gallery 1.x init.inc.php Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/10253/info Coppermine Photo Gallery is reported prone to multiple input-validation vulnerabilities, some of which may lead to arbitrary command execution. These issues occur because the application fails to properly...
Microsoft IIS 5.0 Indexed Directory Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1756/info If Index Server is enabled in Microsoft Internet Information Server 5.0, it is possible for a remote user to view the entire root directory structure and all sub-directories due to a flaw in the Web Distributed...
Martin Hamilton ROADS 2.3 File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2371/info A remote user could gain read access to known files outside of the root directory where Martin Hamilton ROADS resides. Requesting a specially crafted URL composed of '%00' sequences along with the known filename...
guido frassetto sedum http server 2.0 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2335/info A remote user could gain read access to known files outside of the root directory in a SEDUM HTTP Server. Requesting a specially crafted URL composed of '../' or '.../' sequences will disclose the requested file...
Apache Tomcat 3.2.3/3.2.4 Source.JSP Malformed Request Information Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/4876/info Apache Tomcat is a freely available, open source web server maintained by the Apache Foundation. Under some circumstances, Tomcat may yield sensitive information about the web server configuration. When the...
Angelo-emlak 1.0 - Database Disclosure Vulnerability
No description provided by source. !/usr/bin/env python -- coding:utf-8 -- import re from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class AngeloemlakDatabaseFoundPOCBase: vulID = '67229' version = '1' vulDate = '2010-04-27' author =...
AtheOS 0.3.7 Change Root Relative Path Directory Escaping Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4051/info AtheOS is a freely available, open source operating system. It is distributed under the GPL, and maintained by the AtheOS project. It is possible to escape change rooted directories on AtheOS. Due to insufficien...
Cloisterblog 1.2.2 Journal.pl Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10000/info A vulnerability has been reported to exist in Cloisterblog that may allow a remote attacker to access information outside the server root directory. The problem exists due to insufficient sanitization of...
ADA IMGSVR 0.4 - Remote File Download Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10027/info A vulnerability has been reported in the ImgSvr server software that may allow a remote user to the retrieve arbitrary files from the web server root directory and any subdirectories therein. An attacker may...
httpdx 1.5 'MKD' Command Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38242/info The 'httpdx' program is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue allows an authenticated user to create directories outsi...
Habari Blog Multiple Vulnerabilities
No description provided by source. Vulnerability ID: HTB22732 Reference: http://www.htbridge.ch/advisory/pathdisclosureinhabari.html Product: Habari Vendor: Habari http://habariproject.org/en/ Vulnerable Version: 0.6.5 Vendor Notification: 02 December 2010 Vulnerability Type: Path disclosure...
Solarwinds Storage Manager 5.1.0 - SQL Injection
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
netserve web server 1.0.7 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9059/info It has been reported that NetServe may be prone to a directory traversal vulnerability that may allow an attacker to gain access to sensitive information. The issue presents itself due to insufficient sanitizati...
Hand-Crafted Software FreeProxy 3.5/3.6 - FreeWeb Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9388/info It has been reported that FreeWeb server of FreeProxy may be prone to a directory traversal vulnerability that may allow a remote attacker to access information outside the server root directory. The issue may...
Working Resources BadBlue 1.2.7 Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2390/info Requesting a specially crafted URL to a machine running Working Resources BadBlue, will disclose the physical path to the root directory. http://target/ext.dll will result in: Error: opening c:\program...
SurfControl SuperScout WebFilter for windows 2000 File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5857/info SurfControl SuperScout WebFilter Reports Server is prone to a vulnerability which may allow remote attackers to disclose the contents of arbitrary files. The Reports Server does not sufficiently filter...