44 matches found
CVE-2016-5253
The Updater in Mozilla Firefox before 48.0 on Windows allows local users to write to arbitrary files via vectors involving the callback application-path parameter and a hard link...
Localize: Full Path Disclosure (2)
During the import of an XML file,I edited the "file" to "url" for importing XML's through URL.So it became: html And then I tried to import a random XML file.I tried with this: http://www.swarthmore.edu/libraries.xml It was not a valid XML file.And after the importing it showed the following erro...
CVE-2007-0607
W-Agora Web-Agora 4.2.1, when registerglobals is enabled, stores globals.inc under the web document root with insufficient access control, which allows remote attackers to obtain application path information via a direct request...
CVE-2007-0607
W-Agora Web-Agora 4.2.1, when registerglobals is enabled, stores globals.inc under the web document root with insufficient access control, which allows remote attackers to obtain application path information via a direct request...