PHP-Gastebuch 1.60 - Information Disclosure

source: https://www.securityfocus.com/bid/8270/info PHP-Gastebuch has been reported prone to multiple information disclosure vulnerabilities. The issue presents itself because the affected software fails to sufficiently control access to sensitive files contained in the PHP-Gastebuch installation...

WebCalendar 0.9.x - Local File Inclusion Information Disclosure

WebCalendar 0.9.x - Local File Inclusion Information Disclosure source: https://www.securityfocus.com/bid/8237/info It has been reported that an information disclosure issue exists in WebCalendar. This may allow an attacker to gain unauthorized read access to potentially sensitive information wit...

Mabry Software HTTPServerX 1.0 0.047 - File Disclosure

Mabry Software HTTPServerX 1.0 0.047 - File Disclosure source: https://www.securityfocus.com/bid/8166/info Mabry Software HTTPServer/X is prone to directory traversal attacks. This could be exploited by a remote attacker to gain access to sensitive files on a system hosting the web server...

Mabry Software HTTPServer/X 1.0 0.047 - File Disclosure

source: https://www.securityfocus.com/bid/8166/info Mabry Software HTTPServer/X is prone to directory traversal attacks. This could be exploited by a remote attacker to gain access to sensitive files on a system hosting the web server implementation...

Compaq Web-Based Management Agent - Remote File Verification

Compaq Web-Based Management Agent - Remote File Verification source: https://www.securityfocus.com/bid/8019/info Compaq Web-Based Management Agent has been reported vulnerable to a remote file verification vulnerability. This information leak could be exploited by an attacker to verify the...

Compaq Web-Based Management Agent - Remote File Verification

source: https://www.securityfocus.com/bid/8019/info Compaq Web-Based Management Agent has been reported vulnerable to a remote file verification vulnerability. This information leak could be exploited by an attacker to verify the existence of sensitive files on a vulnerable system...

SurfControl Web Filter 4.2.0.1 - File Disclosure

source: https://www.securityfocus.com/bid/7978/info A problem with Web Filter may allow attackers to obtain access to sensitive files. The vulnerability occurs due to insufficent sanitization of '.../' directory traversal sequences. http://isa-surfserver:8888/.../.../.../.../winnt/...

Methodus 3 Web Server - File Disclosure

Methodus 3 Web Server - File Disclosure source: https://www.securityfocus.com/bid/7908/info The Methodus 3 Web Server component is prone to a file disclosure vulnerability. It is possible for remote attackers to retrieve resources outside of the web root directory via directory traversal attacks...

Methodus 3 Web Server - File Disclosure

source: https://www.securityfocus.com/bid/7908/info The Methodus 3 Web Server component is prone to a file disclosure vulnerability. It is possible for remote attackers to retrieve resources outside of the web root directory via directory traversal attacks. This could potentially be exploited to...

Gnutella Root Directory Misconfiguration

The remote host is running the Gnutella servent service. It seems that the root directory of the remote host is visible through this service. Confidential files might be exported. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11716; scriptversion "1.13";...

HP-UX FTPD 1.1.214.4 - 'REST' Memory Disclosure

// source: https://www.securityfocus.com/bid/7825/info A vulnerability has been discovered in the HP-UX 11 ftpd daemon. The problem can be triggered using the FTP REST command. By specifying a specially calculated numeric argument to the command, it is possible to disclose the contents of that...

HP-UX FTPD 1.1.214.4 - REST Memory Disclosure

HP-UX FTPD 1.1.214.4 - REST Memory Disclosure // source: https://www.securityfocus.com/bid/7825/info A vulnerability has been discovered in the HP-UX 11 ftpd daemon. The problem can be triggered using the FTP REST command. By specifying a specially calculated numeric argument to the command, it i...

Webfroot Shoutbox 2.32 - Expanded.php Directory Traversal

Webfroot Shoutbox 2.32 - Expanded.php Directory Traversal source: https://www.securityfocus.com/bid/7775/info A problem in Shoutbox may result in traversal attacks. The vulnerability exists due to insufficient sanitization of user-supplied values to the expanded.php script, and could allow the...

Webfroot Shoutbox 2.32 - 'Expanded.php' Directory Traversal

source: https://www.securityfocus.com/bid/7775/info A problem in Shoutbox may result in traversal attacks. The vulnerability exists due to insufficient sanitization of user-supplied values to the expanded.php script, and could allow the viewing of potentially sensitive files by attackers...

iisPROTECT Encoded URL Authentication Bypass

The remote host is running iisPROTECT, an IIS add-on to protect pages served by the web server. iisPROTECT is affected by an authentication bypass vulnerability due to a failure to recognize basic URL encoding. A remote attacher can exploit this, via hex-encoding requested URLs, to read sensitive...

CVE-2002-1710

The attachment capability in Compose Mail in BasiliX Webmail 1.1.0 does not check whether the attachment was uploaded by the user or came from a HTTP POST, which could allow local users to steal sensitive information like a password file...

Zeroo HTTP Server 1.5 - Directory Traversal (1)

Zeroo HTTP Server 1.5 - Directory Traversal 1 // source: https://www.securityfocus.com/bid/6308/info It has been reported that Zeroo fails to properly sanitize web requests. By sending a malicious web request to the vulnerable server, using directory traversal sequences, it is possible for a remo...

ION Script 1.4 - Remote File Disclosure

source: https://www.securityfocus.com/bid/6091/info A vulnerability has been discovered in ION Script. By sending a malicious HTTP request to a webserver running the vulnerable ION Script package, it is possible for a remote attacker to disclose arbitrary webserver readable files. As webservers a...

ION Script 1.4 - Remote File Disclosure

ION Script 1.4 - Remote File Disclosure source: https://www.securityfocus.com/bid/6091/info A vulnerability has been discovered in ION Script. By sending a malicious HTTP request to a webserver running the vulnerable ION Script package, it is possible for a remote attacker to disclose arbitrary...

Ilia Alshanetsky FUDForum 1.2.81.9.82.0.2 - File Disclosure

Ilia Alshanetsky FUDForum 1.2.81.9.82.0.2 - File Disclosure source: https://www.securityfocus.com/bid/5501/info Reportedly, FUDForum may disclose contents of arbitrary files to attackers. The vulnerability is the result of FUDForum failing to check the path of the file that is being requested. By...