Path Traversal

Overview Versions of sapper prior to 0.27.11 are vulnerable to Path Traversal. It is possible to access sensitive files on the server through HTTP requests containing URL-encoded ../. You may test a sapper application running in prod mode with curl -vvv...

PT-2019-9040 · Clickhouse · Clickhouse Mysql Client

Name of the Vulnerable Software and Affected Versions: ClickHouse MySQL client versions prior to 1.1.54390 Description: The issue concerns the "LOAD DATA LOCAL INFILE" functionality in the ClickHouse MySQL client, which was enabled and allowed a malicious MySQL database to read arbitrary files fr...

Arbitrary File Read Vulnerability in OurPHP v1.8.0

OURPHP 傲派建站系统 is a website content management system developed using PHP language, the developer is Harbin Weicheng Technology Co. OurPHP v1.8.0 suffers from an arbitrary file reading vulnerability. An attacker can exploit the vulnerability to read sensitive files...

CVE-2016-9086

GitLab versions 8.9.x and above contain a critical security flaw in the "import/export project" feature of GitLab. Added in GitLab 8.9, this feature allows a user to export and then re-import their projects as tape archive files tar. All GitLab versions prior to 8.13.0 restricted this feature to...

CVE-2009-3369

CgiUserConfigEdit in BackupPC 3.1.0, when SSH keys and Rsync are in use in a multi-user environment, does not restrict users from the ClientNameAlias function, which allows remote authenticated users to read and write sensitive files by modifying ClientNameAlias to match another system, then...

xpweb-disclose.txt

XPWeb 3.3.2 Download.php url Remote File Disclosure Vulnerability http://puzzle.dl.sourceforge.net/sourceforge/xpweb/XPWebv3.3.2.tgz POC : /XPWebv3.3.2/Download.php?url=Config.inc.php /XPWebv3.3.2/Download.php?url=../../../../../../../etc/passwd Dorks : intitle:XPWeb 3.3.2 intitle:XPWeb 3.0.1 I'm...

phpPolls 1.0.3 (acces to sensitive file)

phpPolls 1.0.3 acces to sensitive file By : sn0oPy Risk : medium exploit : Replace http://www.target.ma/phpPolls/index.php3 by http://www.target.ma/phpPolls/phpPollAdmin.php3 dork : inurl:"phpPolls/" contact : [email protected] Site : http://forums.avenir-geopolitique.net greetz :...

escripts software e_board 4.0 - Directory Traversal

escripts software eboard 4.0 - Directory Traversal source: https://www.securityfocus.com/bid/12048/info It is reported that eBoard is vulnerable to a directory traversal vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input. By including '../'...

Xedus Web Server 1.0 - Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/11071/info It is reported that Xedus is susceptible to multiple vulnerabilities. The first reported issue is a denial of service vulnerability. The affected application is unable to service multiple simultaneous connections, denying access to the hosted...

Keene Digital Media Server 1.0.2 - Directory Traversal

source: https://www.securityfocus.com/bid/11057/info It is reported that DMS is susceptible to a directory traversal vulnerability. The directory traversal issue is present upon requesting files outside the webroot of the application using hex encoded directory traversal character sequences to...

AWStats Input Validation Hole in 'logfile'

No description provided by source. Example: http://target/awstats.pl?filterrawlog=&rawlogmaxlines=5000&config=stats.jdims.info&framename=main&pluginmode=rawlog&log file=/etc/passwd...

Acme thttpd 2.0.7 - Directory Traversal

Acme thttpd 2.0.7 - Directory Traversal source: https://www.securityfocus.com/bid/10862/info It is reported that thttpd is susceptible to a directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. This issue only exists in the Windows...

Acme thttpd 2.0.7 - Directory Traversal

source: https://www.securityfocus.com/bid/10862/info It is reported that thttpd is susceptible to a directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. This issue only exists in the Windows port of the application, as it does not...

Sambar Server 6.1 Beta 2 - 'show.asp?show' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10444/info Sambar Server is reportedly prone to multiple vulnerabilities. These issues may allow an attacker to access sensitive files and carry out directory traversal and cross-site scripting attacks. These issues require an attacker to have...

Trend Micro Interscan VirusWall localweb - Directory Traversal

source: https://www.securityfocus.com/bid/9966/info It has been reported that InterScan VirusWall may to a directory traversal vulnerability that may allow an attacker to request files from the '/ishttp/localweb' directory and any sub directories of 'localweb' with directory traversal strings suc...

Fools Workshop Owls Workshop 1.0 - multiplechoiceindex.php Arbitrary File Access

Fools Workshop Owls Workshop 1.0 - multiplechoiceindex.php Arbitrary File Access source: https://www.securityfocus.com/bid/9689/info Owl's Workshop is reported prone to multiple remote file-disclosure vulnerabilities because the application fails to validate user-supplied input passed via a URI...

Fool's Workshop Owl's Workshop 1.0 - 'glossary.php' Arbitrary File Access

source: https://www.securityfocus.com/bid/9689/info Owl's Workshop is reported prone to multiple remote file-disclosure vulnerabilities because the application fails to validate user-supplied input passed via a URI parameter. Upon successful exploitation of these issues, an attacker may be able t...

Fools Workshop Owls Workshop 1.0 - glossariesindex.php?File Arbitrary File Access

Fools Workshop Owls Workshop 1.0 - glossariesindex.php?File Arbitrary File Access source: https://www.securityfocus.com/bid/9689/info Owl's Workshop is reported prone to multiple remote file-disclosure vulnerabilities because the application fails to validate user-supplied input passed via a URI...

Fools Workshop Owls Workshop 1.0 - glossary.php Arbitrary File Access

Fools Workshop Owls Workshop 1.0 - glossary.php Arbitrary File Access source: https://www.securityfocus.com/bid/9689/info Owl's Workshop is reported prone to multiple remote file-disclosure vulnerabilities because the application fails to validate user-supplied input passed via a URI parameter...

sap internet transaction server 4620.2.0.323011 build 46b.323011 - Directory Traversal

source: https://www.securityfocus.com/bid/8516/info SAP is said to be prone to a directory traversal vulnerability, potentially allowing users to disclose the contents of sensitive files. The problem occurs due to the application failing to parse user-supplied input for directory traversal...