2114 matches found
Design/Logic Flaw
lib/setuplib.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the absolute path in an exception message...
Path traversal
Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 and earlier allows remote attackers to read arbitrary files via a full pathname in an argument to the sub401A90 CreateFileW function...
CVE-2013-1831
lib/setuplib.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the absolute path in an exception message...
UBUNTU-CVE-2013-1831
lib/setuplib.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the absolute path in an exception message...
libarchive -- multiple vulnerabilities
MITRE reports: Integer signedness error in the archivewritezipdata function in archivewritesetformatzip.c in libarchive 3.1.2 and earlier, when running on 64-bit machines, allows context-dependent attackers to cause a denial of service crash via unspecified vectors, which triggers an improper...
The latest FCKeditor proof absolute path vulnerability-vulnerability warning-the black bar safety net
Code: FCKeditor/editor/filemanager/connectors/asp/connector. asp? Command=CreateFolder&Type=File&CurrentFolder=%2F&NewFolderName=aux Version not test it. Principle: create an aux folder, aux in the windows system is not supported, so will complain, broke the absolute path, this relatively...
Path traversal
Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD request with a full pathname in a PATH element of an SRS record...
The latest wordpress proof absolute path method-vulnerability warning-the black bar safety net
Vulnerability file: /wp-includes/user.php...
MagicMail Mike g & e-mail system XSS and absolute path vulnerability-vulnerability warning-the black bar safety net
This morning in the Black Box testing of the local education network of the time to find a mail system vulnerability Comprising a reflectiveXSS as well as the absolute path to the leak Looked at looks like all is linux. Keywords: Mike g & e-mail system by MagicMail ! You can see a lot of governme...
shopex front Desk ordinary users getshell the latest vulnerability-vulnerability warning-the black bar safety net
Use method: First: think of a way to find the target site's absolute path http://www.wooyun.in/install/svinfo.php?phpinfo=true http://www.wooyun.in/core/api/shopapi.php http://www.wooyun.in/core/api/site/2.0/apib2b20cat.php http://www.wooyun.in/core/api/site/2.0/apib2b20goodstype.php...
QNAP Turbo NAS privilege escalation
It's possible to manipulate files by absolute path...
CVE-2012-4878
Absolute path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 allows remote administrators to read arbitrary files via a full pathname in the dir parameter in a contents/Files action...
Path traversal
Absolute path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 allows remote administrators to read arbitrary files via a full pathname in the dir parameter in a contents/Files action...
CVE-2012-4878
FlatnuX CMS 2011 08.09.2 is affected by an absolute path traversal in controlcenter.php, allowing remote administrators to read arbitrary files via a full pathname supplied in the dir parameter of a contents/Files action. The underlying issue is a path traversal vulnerability that enables access ...
CVE-2012-2421
Absolute path traversal vulnerability in the intu-help-qb aka Intuit Help System Async Pluggable Protocol handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, might allow remote attackers to read arbitrary files in ZIP archives via a...
Path traversal
Absolute path traversal vulnerability in the intu-help-qb aka Intuit Help System Async Pluggable Protocol handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, might allow remote attackers to read arbitrary files in ZIP archives via a...
CVE-2012-2421
CVE-2012-2421 describes an absolute path traversal vulnerability in the Intuit QuickBooks Help System (HelpAsyncPluggableProtocol.dll) used by the intu-help-qb handlers. Affected products are QuickBooks 2009–2012 when Internet Explorer is used. The issue could allow an attacker to read arbitrary ...
CVE-2012-1790
CVE-2012-1790 affects Webgrind 1.0 and 1.0.2, enabling absolute path traversal via the file parameter to index.php. Exploitation allows reading arbitrary files; multiple sources (NVD, Veracode, PRION, CVE lists) corroborate the path traversal description. No vendor-specific patch/version is provi...
Path traversal
Absolute path traversal vulnerability in download.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to read arbitrary files via the f parameter...