DUware Software Multiple Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/9462/info It has been reported that various DUware products may be prone to an access validation issue allowing a remote attacker to gain access to sensitive resources by bypassing authentication. An arbitrary file upload...

SquidGuard 1.x - NULL URL Character Unauthorized Access

SquidGuard 1.x - NULL URL Character Unauthorized Access source: https://www.securityfocus.com/bid/9919/info Reportedly SquidGuard is prone to a remote NULL URL character unauthorized access vulnerability. This issue is due to a failure of the application to properly filter out invalid URIs...

phpNewsManager 1.36 - functions Script File Disclosure

phpNewsManager 1.36 - functions Script File Disclosure source: https://www.securityfocus.com/bid/9720/info phpNewsManager is prone to a file disclosure vulnerability. Remote attackers may submit malicious requests to the software that contain directory traversal sequences, potentially exposing...

DUware Software - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/9462/info It has been reported that various DUware products may be prone to an access validation issue allowing a remote attacker to gain access to sensitive resources by bypassing authentication. An arbitrary file upload vulnerability has been specified ...

DUware Software - Multiple Vulnerabilities

DUware Software - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/9462/info It has been reported that various DUware products may be prone to an access validation issue allowing a remote attacker to gain access to sensitive resources by bypassing authentication. An arbitrary fi...

silentthought simple Web server 1.0 - Directory Traversal

source: https://www.securityfocus.com/bid/7888/info It has been reported that Simple Web Server fails to properly sanitize web requests. By sending a malicious web request to the vulnerable server, using directory traversal sequences, it is possible for a remote attacker to access sensitive...

WSMP3 0.0.x - Remote Information Disclosure

source: https://www.securityfocus.com/bid/7642/info A vulnerability has been reported in WsMp3. The problem occurs due to insufficient sanitization of HTTP GET requests. As a result, an attacker may be capable of accessing the contents of sensitive system resources. Information obtained through t...

QuickFront 1.0 - File Disclosure

source: https://www.securityfocus.com/bid/7308/info A vulnerability has been reported for QuickFront that will result in the disclosure of sensitive system resources to remote attackers. QuickFront does not properly sanitize user-supplied input. Specifically, directory traversal sequences such as...

Computer Associates - Unicenter Asset Manager Stored Secret Data Decryption

Computer Associates - Unicenter Asset Manager Stored Secret Data Decryption source: https://www.securityfocus.com/bid/7808/info It has been reported that Unicenter Asset Manager stores password information in a way that may be easily recovered. Because of this, an attacker may be able to gain...

PlatinumFTPServer 1.0.6 - Information Disclosure

source: https://www.securityfocus.com/bid/6492/info It has been reported that PlatinumFTPserver fails to properly sanitize some FTP commands. By sending a malicious request to the vulnerable server, using directory traversal sequences, it is possible for a remote attacker to obtain information...

PlatinumFTPServer 1.0.6 - Arbitrary File Deletion

source: https://www.securityfocus.com/bid/6493/info It has been reported that PlatinumFTPserver fails to properly sanitize some FTP commands. By sending a malicious request to the vulnerable server, using directory traversal sequences, it is possible for a remote attacker to delete sensitive...

Zeroo HTTP Server 1.5 - Directory Traversal (2)

Zeroo HTTP Server 1.5 - Directory Traversal 2 source: https://www.securityfocus.com/bid/6308/info It has been reported that Zeroo fails to properly sanitize web requests. By sending a malicious web request to the vulnerable server, using directory traversal sequences, it is possible for a remote...

Zeroo HTTP Server 1.5 - Directory Traversal (1)

// source: https://www.securityfocus.com/bid/6308/info It has been reported that Zeroo fails to properly sanitize web requests. By sending a malicious web request to the vulnerable server, using directory traversal sequences, it is possible for a remote attacker to access sensitive resources...

Zeroo HTTP Server 1.5 - Directory Traversal (2)

source: https://www.securityfocus.com/bid/6308/info It has been reported that Zeroo fails to properly sanitize web requests. By sending a malicious web request to the vulnerable server, using directory traversal sequences, it is possible for a remote attacker to access sensitive resources located...

Mollensoft Software Enceladus Server Suite 2.6.13.9 - Directory Traversal

Mollensoft Software Enceladus Server Suite 2.6.13.9 - Directory Traversal source: https://www.securityfocus.com/bid/6338/info It has been reported that Enceladus fails to properly sanitize web requests. By sending a malicious web request to the vulnerable server, using directory traversal...

Mollensoft Software Enceladus Server Suite 2.6.1/3.9 - Directory Traversal

source: https://www.securityfocus.com/bid/6338/info It has been reported that Enceladus fails to properly sanitize web requests. By sending a malicious web request to the vulnerable server, using directory traversal sequences, it is possible for a remote attacker to view and download sensitive...

MultiHTML 1.5 - File Disclosure

MultiHTML 1.5 - File Disclosure source: https://www.securityfocus.com/bid/6711/info MultiHTML is prone to a file disclosure vulnerability. It is possible for remote attackers to issue requests which are capable of disclosing sensitive webserver readable resources on the system hosting the softwar...

MultiHTML 1.5 - File Disclosure

source: https://www.securityfocus.com/bid/6711/info MultiHTML is prone to a file disclosure vulnerability. It is possible for remote attackers to issue requests which are capable of disclosing sensitive webserver readable resources on the system hosting the software...