Path traversal

Absolute path traversal vulnerability in dload.php in the mygallery 2.3 plugin for e107 allows remote attackers to obtain sensitive information via a full pathname in the file parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-1702

Absolute path traversal vulnerability in dload.php in the mygallery 2.3 plugin for e107 allows remote attackers to obtain sensitive information via a full pathname in the file parameter. NOTE: some of these details are obtained from third party information...

Absolute path traversal Apache Tomcat WEBDAV

Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag...

Absolute path traversal Apache Tomcat WEBDAV

Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag...

Path traversal

Absolute path traversal vulnerability in install/index.php in Drake CMS 0.4.11 RC8 allows remote attackers to read and execute arbitrary files via a full pathname in the droot parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-1371

CVE-2008-1371 affects Drake CMS 0.4.11 RC8 via an absolute path traversal in install/index.php, exploitable through a full pathname supplied in the d_root parameter. This allows remote attackers to read and execute arbitrary files. The description notes provenance as third-party information; no r...

Path traversal

Absolute path traversal vulnerability in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote authenticated administrators to read arbitrary files via a full pathname in the filePath.0 parameter...

CVE-2008-1221

Absolute path traversal vulnerability in the FTP server in MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Management Console aka eScan Server 9.0.742.1 allows remote attackers to read arbitrary files via an absolute pathname in the RETR get command...

CVE-2008-1221

CVE-2008-1221 describes an absolute path traversal in the FTP server of MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Management Console (eScan Server) 9.0.742.1. The vulnerability allows a remote attacker to read arbitrary files via an absolute pathname in the RETR (get) command. Affec...

CVE-2008-1221

Absolute path traversal vulnerability in the FTP server in MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Management Console aka eScan Server 9.0.742.1 allows remote attackers to read arbitrary files via an absolute pathname in the RETR get command...

Mozilla Foundation Security Advisory 2008-11

Mozilla Foundation Security Advisory 2008-11 Title: Web forgery overwrite with div overlay Impact: Low Announced: February 7, 2008 Reporter: Emil Ljungdahl, Lars-Olof Moilanen Products: Firefox Fixed in: Firefox 2.0.0.12 Description Security researchers Emil Ljungdahl and Lars-Olof Moilanen...

CVE-2008-0594

Mozilla Firefox before 2.0.0.12 does not always display a web forgery warning dialog if the entire contents of a web page are in a DIV tag that uses absolute positioning, which makes it easier for remote attackers to conduct phishing attacks...

Design/Logic Flaw

Mozilla Firefox before 2.0.0.12 does not always display a web forgery warning dialog if the entire contents of a web page are in a DIV tag that uses absolute positioning, which makes it easier for remote attackers to conduct phishing attacks...

CVE-2008-0594

Mozilla Firefox before 2.0.0.12 does not always display a web forgery warning dialog if the entire contents of a web page are in a DIV tag that uses absolute positioning, which makes it easier for remote attackers to conduct phishing attacks...

Web forgery overwrite with div overlay — Mozilla

Security researchers Emil Ljungdahl and Lars-Olof Moilanen demonstrated that, in cases where the entire contents of a page are enclosed in a with absolute positioning, a web forgery warning dialog won't be displayed unless the user switches tabs away-from then back-to the forgery page...

CVE-2008-0425

CVE-2008-0425 affects Frimousse 0.0.2, in explorerdir.php, via an absolute path traversal in the name parameter. This allows remote attackers to read arbitrary files and list directories. Public exploits are referenced (e.g., Exploit-DB link 4943). The provided documents do not include a remediat...

Debian: Security Advisory (DSA-1453-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-265)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-0184

CVE-2008-0184 affects Sys-Hotel on Line System. Affects the index.php file where an absolute path traversal can occur via an encoded slash (%2F) in the file parameter, enabling remote reading of arbitrary files. The NVD entry lists a Network attack vector with Low complexity and no authentication...

Path traversal

Absolute path traversal vulnerability in index.php in Million Dollar Script 2.0.14 allows remote attackers to read arbitrary files via encoded "/" %2F sequences in the link parameter...