494 matches found
Дырка в PHPix
Обратный путь в директориях позволяет обращаться к любым файлам, например http://target.com/Album/?mode=album&album=..2F..2F..2F..2F..2F..2F..2F..2Fetc&dispsize=640&start=0...
anyportal-0.1.txt
======================================================== AnyPortalphp-0.1 Vulnerability ======================================================== Date: 08/09/2000 Author: zorgon Web: http://www.nightbird.free.fr Introduction -------------- Secure Reality Pty Ltd. has published the Security Advisor...
QSSL Voyager 2.0 1B - '.photon' Directory Information Disclosure
source: https://www.securityfocus.com/bid/1648/info The web server supplied with the QNX Voyager demo disk contains several vulnerabilities. First, Voyager will follow relative paths passed to it in requests. This includes ../ style paths, which will allow Voyager to serve pages outside of the...
QSSL Voyager 2.0 1B - .photon Directory Information Disclosure
QSSL Voyager 2.0 1B - .photon Directory Information Disclosure source: https://www.securityfocus.com/bid/1648/info The web server supplied with the QNX Voyager demo disk contains several vulnerabilities. First, Voyager will follow relative paths passed to it in requests. This includes ../ style...
CVE-2000-0234
The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccess file...
vqserver /........../
Version tested: vqserver 1.9.9 for windows The webserver vqserver follows /........../ in requests. http://host/........../autoexec.bat gives the autoexec.bat file. More serious, http://host/........../some/path/vq/server/cfg/server.cfg where /some/path/ could be anything, but normally...
CVE-2000-0234
The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccess file...
The ht:Dig Group ht:Dig 3.1.13.1.23.1.33.1.43.2 .0b1 - Arbitrary File Inclusion
The ht:Dig Group ht:Dig 3.1.13.1.23.1.33.1.43.2 .0b1 - Arbitrary File Inclusion source: https://www.securityfocus.com/bid/1026/info ht://dig is a web content search engine for Unix platforms. The software is set up to allow for file inclusion from configuration files. Any string surrounded by the...
CVE-1999-0086
AIX routed allows remote users to modify sensitive files...
CVE-2000-0069
CVE-2000-0069 concerns the recover program in Solstice Backup, where local users can restore sensitive files. Documents indicate affected status and that the vulnerability allows local access to sensitive data, but do not specify affected versions or any available fix. The PT-2000-1060 entry note...
CVE-2000-0069
The recover program in Solstice Backup allows local users to restore sensitive files...
formhandler.cgi.txt
From: Mnemonix Subject: FormHandler.cgi FormHandler.cgi available from http://www.cgi-perl.com/programs/FormHandler uses hard coded physical paths for templates etc so it's possible to get sensitive files like /etc/passwd by modifying a site's f orm and submitting it. Cheers, David Litchfield...
teamshare teamtrack 3.0 - Directory Traversal
teamshare teamtrack 3.0 - Directory Traversal source: https://www.securityfocus.com/bid/689/info TeamTrack 3.00 has a built-in webserver which is meant to be used during the evaluation period, or until IIS or Netscape Enterprise/FastTrack is installed. This server does not filter out requested...