CVE-2004-2617

Directory traversal vulnerability in Pegasi Web Server PWS 0.2.2 allows remote attackers to read files outside of the web root via a .. dot dot directly after the initial '/' slash in the URI...

CVE-2002-2158

The CVE CVE-2002-2158 affects zenTrack 2.0.3 and earlier and causes an information disclosure: remote attackers can obtain the full path to the web root via an invalid ticket ID, leaking the path in an error message. The available documents confirm the affected software/component (zenTrack) and t...

CVE-2002-2158

zenTrack 2.0.3 and earlier allows remote attackers to obtain the full path to the web root via an invalid ticket ID, which leaks the path in an error message...

CVE-2005-3551

toendaCMS before 0.6.2 stores user account and session data in the web root directory, which allows remote attackers to obtain sensitive information via a direct request to the appropriate XML file...

CVE-2005-3551

toendaCMS before 0.6.2 stores user account and session data in the web root directory, which allows remote attackers to obtain sensitive information via a direct request to the appropriate XML file...

RaidenHTTPD directory traversal

The remote host is running a version of RaidenHTTPD which is vulnerable to a remote directory traversal bug. An attacker exploiting this bug would be able to gain access to potentially confidential material outside of the web root. OpenVAS Vulnerability Test $Id: raidenHTTPDdirtraversal.nasl 6063...

IIS 5.0 Sample App reveals physical path of web root

A sample application shipped with IIS 5.0 discloses the physical path of the web root. An attacker can use this information to make more focused attacks. OpenVAS Vulnerability Test $Id: iis5samplepath.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: IIS 5.0 Sample App reveals physical path of...

Oracle 9iAS default error information disclosure

It is possible to obtain the physical path of the remote server web root. Description : Oracle 9iAS allows remote attackers to obtain the physical path of a file under the server root via a request for a non-existent .JSP file. The default error generated leaks the pathname in an error message...

Check for Apache Multiple / vulnerability

Certain versions of Apache for Win32 have a bug wherein remote users can list directory entries. Specifically, by appending multiple /'s to the HTTP GET command, the remote Apache server will list all files and subdirectories within the web root as defined in httpd.conf. OpenVAS Vulnerability Tes...

IIS 5.0 Sample App reveals physical path of web root

A sample application shipped with IIS 5.0 discloses the physical path of the web root. An attacker can use this information to make more focused attacks. SPDX-FileCopyrightText: 2000 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Sgdynamo 'sgdynamo.exe' Physical Path Disclosure Vulnerability

The CGI SPDX-FileCopyrightText: 2003 Scott Shebby Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11954";...

[SA17240] MailSite Express Attachment Upload Vulnerability

TITLE: MailSite Express Attachment Upload Vulnerability SECUNIA ADVISORY ID: SA17240 VERIFY ADVISORY: http://secunia.com/advisories/17240/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: MailSite 6.x http://secunia.com/product/5898/ DESCRIPTION: Soroush dalili has...

CVE-2005-3163

Unspecified vulnerability in Polipo 0.9.8 and earlier allows attackers to read files outside of the web root...

CVE-2005-3163

Unspecified vulnerability in Polipo 0.9.8 and earlier allows attackers to read files outside of the web root...

CVE-2005-3163

Unspecified vulnerability in Polipo 0.9.8 and earlier allows attackers to read files outside of the web root...

CVE-2005-3163

Polipo

CVE-2005-3163

Removed by vendor...

CVE-2005-3102

The administrative interface in Movable Type allows attackers to upload files with arbitrary extensions under the web root...

CVE-2005-3102

The administrative interface in Movable Type allows attackers to upload files with arbitrary extensions under the web root...

CVE-2002-2094

CVE-2002-2094 affects the Hellbent vulnerability described in PT-2002-2814 for hellbent version 01. An attacker can determine the full path of the web root directory by sending a GET request with a relative path that includes the web root’s parent. If the parent is incorrect, the server returns a...