137 matches found
Acme thttpd 2.0.7 - Directory Traversal
source: https://www.securityfocus.com/bid/10862/info It is reported that thttpd is susceptible to a directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. This issue only exists in the Windows port of the application, as it does not...
Sambar Server 6.1 Beta 2 - 'show.asp?show' Cross-Site Scripting
source: https://www.securityfocus.com/bid/10444/info Sambar Server is reportedly prone to multiple vulnerabilities. These issues may allow an attacker to access sensitive files and carry out directory traversal and cross-site scripting attacks. These issues require an attacker to have...
Trend Micro Interscan VirusWall localweb - Directory Traversal
source: https://www.securityfocus.com/bid/9966/info It has been reported that InterScan VirusWall may to a directory traversal vulnerability that may allow an attacker to request files from the '/ishttp/localweb' directory and any sub directories of 'localweb' with directory traversal strings suc...
Fools Workshop Owls Workshop 1.0 - multiplechoiceindex.php Arbitrary File Access
Fools Workshop Owls Workshop 1.0 - multiplechoiceindex.php Arbitrary File Access source: https://www.securityfocus.com/bid/9689/info Owl's Workshop is reported prone to multiple remote file-disclosure vulnerabilities because the application fails to validate user-supplied input passed via a URI...
Fool's Workshop Owl's Workshop 1.0 - 'glossary.php' Arbitrary File Access
source: https://www.securityfocus.com/bid/9689/info Owl's Workshop is reported prone to multiple remote file-disclosure vulnerabilities because the application fails to validate user-supplied input passed via a URI parameter. Upon successful exploitation of these issues, an attacker may be able t...
Fools Workshop Owls Workshop 1.0 - glossariesindex.php?File Arbitrary File Access
Fools Workshop Owls Workshop 1.0 - glossariesindex.php?File Arbitrary File Access source: https://www.securityfocus.com/bid/9689/info Owl's Workshop is reported prone to multiple remote file-disclosure vulnerabilities because the application fails to validate user-supplied input passed via a URI...
Fools Workshop Owls Workshop 1.0 - glossary.php Arbitrary File Access
Fools Workshop Owls Workshop 1.0 - glossary.php Arbitrary File Access source: https://www.securityfocus.com/bid/9689/info Owl's Workshop is reported prone to multiple remote file-disclosure vulnerabilities because the application fails to validate user-supplied input passed via a URI parameter...
sap internet transaction server 4620.2.0.323011 build 46b.323011 - Directory Traversal
source: https://www.securityfocus.com/bid/8516/info SAP is said to be prone to a directory traversal vulnerability, potentially allowing users to disclose the contents of sensitive files. The problem occurs due to the application failing to parse user-supplied input for directory traversal...
Monkey HTTP Server 0.1.4 - File Disclosure
Monkey HTTP Server 0.1.4 - File Disclosure source: https://www.securityfocus.com/bid/5792/info Monkey HTTP server is prone to a directory-traversal bug that may allow attackers to access sensitive files. By passing a malicious query to a vulnerable server, an attacker can potentially gain access ...
eRisk Security Advisory: PhpMyExplorer vulnerable to directory traversal.
eRisk Security Advisory August 29, 2001 ------------------------------ PhpMyExplorer, available from http://elegac.free.fr/, is vulnerable to directory traversal. Synopsis: eRiskSecurity has discovered a fatal flaw in PhpMyExplorer, a popular and very good looking PHP based file manager. It is...
HeliSec: StarOffice symlink exploit
= Helios Security and Administration = - Hi everyone, StarOffice creates a temporary directory in /tmp called soffice.tmp, with permissions 0777. Into this directory other temporary files are creates, with the format: svZZZZ.tmp, where ZZZZ in a four or five digits number. StarOffice not only...
Cat Soft Serv-U FTP Server 2.4/2.5 - FTP Directory Traversal
source: https://www.securityfocus.com/bid/2052/info FTP Serv-U is an internet FTP server from CatSoft. Authenticated users can gain access to the ftproot of the drive where Serv-U FTP has been installed. Users that have read, write, execute and list access in the home directory will have the same...
Дырка в PHPix
Обратный путь в директориях позволяет обращаться к любым файлам, например http://target.com/Album/?mode=album&album=..2F..2F..2F..2F..2F..2F..2F..2Fetc&dispsize=640&start=0...
QSSL Voyager 2.0 1B - '.photon' Directory Information Disclosure
source: https://www.securityfocus.com/bid/1648/info The web server supplied with the QNX Voyager demo disk contains several vulnerabilities. First, Voyager will follow relative paths passed to it in requests. This includes ../ style paths, which will allow Voyager to serve pages outside of the...
QSSL Voyager 2.0 1B - .photon Directory Information Disclosure
QSSL Voyager 2.0 1B - .photon Directory Information Disclosure source: https://www.securityfocus.com/bid/1648/info The web server supplied with the QNX Voyager demo disk contains several vulnerabilities. First, Voyager will follow relative paths passed to it in requests. This includes ../ style...
CVE-2000-0069
CVE-2000-0069 concerns the recover program in Solstice Backup, where local users can restore sensitive files. Documents indicate affected status and that the vulnerability allows local access to sensitive data, but do not specify affected versions or any available fix. The PT-2000-1060 entry note...
