78 matches found
CVE-2017-16200
uv-tj-demo is a static file server. uv-tj-demo is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2015-5299
The shadowcopy2getshadowcopydata function in modules/vfsshadowcopy2.c in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not verify that the DIRECTORYLIST access right has been granted, which allows remote attackers to access snapshots by visiting a shadow copy...
ManageEngine SupportCenter Plus 7.90 - Multiple Vulnerabilities
Exploit for multiple platform in category web applications Document Title: =============== ManageEngine SupportCenter Plus 7.90 - Multiple Vulnerabilities Product & Service Introduction: =============================== SupportCenter Plus is a web-based customer support software that lets...
CVE-2010-2425
CVE-2010-2425 affects South River Technologies Titan FTP Server 8.10.1125 and earlier, with a directory traversal flaw in COMB command due to improper handling of ..// sequences that allows remote authenticated users to read or delete arbitrary files. OpenVAS entries classify Titan FTP Server
GLSA-200502-06 : LessTif: Multiple vulnerabilities in libXpm
The remote host is affected by the vulnerability described in GLSA-200502-06 LessTif: Multiple vulnerabilities in libXpm Multiple vulnerabilities, including buffer overflows, out of bounds memory access and directory traversals, have been discovered in libXpm, which is shipped as a part of the X...
TikiWiki Project 1.8 - 'tiki-map.phtml' Traversal Arbitrary File / Directory Enumeration
source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection,...
CVE-2003-1152
WebTide 7.04 allows remote attackers to list arbitrary directories via an HTTP request for %3f.jsp encoded "?"...
CVE-2002-1523
Directory traversal vulnerability in Daniel Arenz Mini Server 2.1.6 allows remote attackers to read arbitrary files via 1 ../ dot-dot slash or 2 ..\ dot-dot backslash sequences...
SunFTP Multiple Command Traversal Arbitrary File Creation/Deletion
Directory traversal vulnerability in SunFTP build 9 allows remote attackers to read arbitrary files via .. dot dot characters in various commands, including 1 GET, 2 MKDIR, 3 RMDIR, 4 RENAME, or 5 PUT. This script was written by Xue Yong Zhi See the Nessus Scripts License for details Changes by...
CVE-2003-0042
Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character...
CVE-2002-1928
602Pro LAN SUITE 2002 allows remote attackers to view the directory tree via an HTTP GET request with a trailing "" tilde or ".bak" extension...
CVE-2002-0300
gnujsp 1.0.0 and 1.0.1 allows remote attackers to list directories, read source code of certain scripts, and bypass access restrictions by directly requesting the target file from the gnujsp servlet, which does not work around a limitation of JServ and does not process the requested file...
CVE-2001-1335
Directory traversal vulnerability in CesarFTP 0.98b and earlier allows remote authenticated users such as anonymous to read arbitrary files via a GET with a filename that contains a ...%5c modified dot dot...
Vulnerabilty in TYPsoft FTP server
Vulnerabilty in TYPsoft FTP server v0.95 Overview: TYPsoft FTP Server is a freeware ftp server available from http://typsoft.n3.net . Affected systems: FTP server v0.95 - 0.93 and probably prior versions for Windows 95/98/NT/2000/ME Description: An attacker with anonymous access to the ftp server...
CVE-2001-0231
Directory traversal vulnerability in newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via a .. in the "t" parameter...
HM Software S to Infinity 3.0 - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/1368/info A number of vulnerabilities exist in HM Software S to Infinity, a security access control, desktop lockdown and transparent encryption application. Intended features include restriction of access to folders, files, floppy and CD-ROM drives, etc...
broker.ftp.server.3.0.txt
Date: Tue, 1 Jun 1999 07:24:24 +0200 From: Arne Vidstrom To: [email protected] Subject: Vulnerability in Broker FTP Server v. 3.0 Build 1 Hi, I've found a vulnerability in Broker FTP Server v. 3.0 Build 1. Here's an example: You have it installed with FTP root in c:\FTProot and you...