12 matches found
EUVD-2018-4339
Malware in sbrugna...
EUVD-2022-35150
Malicious code in bioql PyPI...
CVE-2023-29200: Improper Limitation of a Pathname to a Restricted Directory
Contao is an open source content management system. Prior to versions 4.9.40, 4.13.21, and 5.1.4, logged in users can list arbitrary system files in the file manager by manipulating the Ajax request. However, it is not possible to read the contents of these files. Users should update to Contao...
SUSE CVE-2005-4095
Directory traversal vulnerability in connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to list arbitrary files and directories via ".." sequences in the Type parameter in a GetFoldersAndFiles command...
PT-2019-17673 · Unknown · Serve-Here.Js
Name of the Vulnerable Software and Affected Versions: serve-here.js versions prior to 1.2.0 Description: The issue allows attackers to list any file in an arbitrary folder due to a path traversal vulnerability. This is caused by the package's failure to sanitize URLs, enabling attackers to acces...
Design/Logic Flaw
In agent/Core/SpawningKit/Spawner.h in Phusion Passenger 5.1.10 fixed in Passenger Open Source 5.1.11 and Passenger Enterprise 5.1.10, if Passenger is running as root, it is possible to list the contents of arbitrary files on a system by symlinking a file named REVISION from the application root...
CVE-2016-0855: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in Advantech WebAccess before 8.1 allows remote attackers to list arbitrary virtual-directory files via unspecified vectors...
CVE-2008-7093: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in Unica Affinium Campaign 7.2.1.0.55 allow remote attackers to 1 create arbitrary directories or files via a .. dot dot in the folder name in the new folder functionality or 2 list arbitrary files via a crafted request to Campaign/CampaignListener...
CVE-2003-1153: Undefined Security Weakness
byteHoard 0.7 and 0.71 allows remote attackers to list arbitrary files and directories via a direct request to files.inc.php...
CVE-2001-0698: Undefined Security Weakness
Directory traversal vulnerability in NetWin SurgeFTP 2.0a and 1.0b allows a remote attacker to list arbitrary files and directories via the 'nlist ...' command...
