SiteBar 3.3.8 - 'translator.php?dir' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/26126/info SiteBar is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input. These issues include: - A local file-include vulnerability - Multiple arbitrary-script-code-execution vulnerabilities -...

CVE-2003-1365

The escapedangerouschars function in CGI::Lite 2.0 and earlier does not correctly remove special characters including 1 "" backslash, 2 "?", 3 "" tilde, 4 "^" carat, 5 newline, or 6 carriage return, which could allow remote attackers to read or write arbitrary files, or execute arbitrary commands...

CVE-2002-2240

CVE-2002-2240 affects MyServer 0.11 and 0.2, where a directory traversal vulnerability allows remote attackers to read arbitrary files via ".." in an HTTP GET. The issue stems from improper handling of path traversal, enabling access to files outside the web root. The NVD entry lists a CVSSv2 bas...

java-jre: Applet Privilege Escalation

The Java Virtual Machine JVM in Sun Java Runtime Environment JRE in SDK and JRE 1.3.x through 1.3.120 and 1.4.x through 1.4.215, and JDK and JRE 5.x through 5.0 Update 12 and 6.x through 6 Update 2, allows remote attackers to execute arbitrary programs, or read or modify arbitrary files, via...

Cart32 c32web.exe ImageName Traversal Arbitrary File Access

Cart32, a shopping cart application, is installed on the remote host. The remote installation of Cart32 fails to sufficiently validate input to the 'GetImage' function of 'c32web.exe' script before returning the contents of arbitrary files, not just image files as intended. An unauthenticated,...

Resin for Windows \WEB-INF Traversal Arbitrary File Access

The remote host is running Resin, an application server. The installation of Resin on the remote host allows an unauthenticated, remote attacker to gain access to the web-inf directories, or any known subdirectories, on the affected Windows host, which could lead to a loss of confidentiality. C...

Caucho Resin 3.1 - web-inf Traversal Arbitrary File Access

Caucho Resin 3.1 - web-inf Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/23985/info Caucho Resin is prone to multiple information-disclosure vulnerabilities because it fails to adequately sanitize user-supplied data. Attackers can exploit these issues to access...

Caucho Resin 3.1 - '/web-inf' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/23985/info Caucho Resin is prone to multiple information-disclosure vulnerabilities because it fails to adequately sanitize user-supplied data. Attackers can exploit these issues to access potentially sensitive data that may aid in further attacks. Resin...

Plesk Multiple Script locale_id Parameter Traversal Arbitrary File Access

The remote host is running Plesk, a control panel used to administer and manage websites. The version of Plesk installed on the remote host fails to sanitize user-supplied input to the 'localeid' parameter of the 'login.php3', 'loginup.php', and 'top.php3' scripts before using it to access files...

CVE-2007-2200

CVE-2007-2200 affects Pagode 0.5.8, where a directory traversal flaw in navigator/navigator_ok.php allows remote attackers to read—and possibly delete—arbitrary files by supplying a .. sequence in the asolute parameter. The vulnerability’s impact is read and potential deletion of files; no exploi...

LedgerSMB / SQL-Ledger file Parameter Multiple Vulnerabilities

The remote host is running LedgerSMB or SQL-Ledger, a web-based double-entry accounting system. The version of LedgerSMB or SQL-Ledger on the remote host fails to properly sanitize the 'file' parameter of the 'am.pl' script before using it in various template routines in the 'AM.pm' module. An...

CVE-2006-7035

Directory traversal vulnerability in makethumbnail.php in Super Link Exchange Script 1.0 allows remote attackers to read arbitrary files via ".." sequences in the imgpath parameter...

Simple one-file Gallery - gallery.php?f Traversal Arbitrary File Access

Simple one-file Gallery - gallery.php?f Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/22700/info Simple one-file gallery is prone to multiple input-validation vulnerabilities, including a local file-include issue and a cross-site scripting issue. An attacker can exploi...

Plantilla - 'list_main_pages.php?nfolder' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/22669/info Simple Plantilla PHP is prone to multiple input-validation issues, including a local file-include vulnerability and an arbitrary file-upload vulnerability. Attackers can exploit the local file-include vulnerability using directory-traversal...

LoveCMS 1.4 - load Traversal Arbitrary File Access

LoveCMS 1.4 - load Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/22675/info LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issu...

LoveCMS 1.4 - step Traversal Arbitrary File Access

LoveCMS 1.4 - step Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/22675/info LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issu...

LifeType < 1.1.6 rss.php profile Parameter Traversal Arbitrary File Access

Binary data 3916.prm...

Mozilla Firefox < 0.0.9 'Plain Old Webserver' (POW) Directory Traversal Arbitrary File Access (deprecated)

Binary data 3910.prm...

PortailPHP 2 - mod_newsindex.php?chemin Traversal Arbitrary File Access

PortailPHP 2 - modnewsindex.php?chemin Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/22381/info PortailPHP is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an...

PortailPHP 2 - '/mod_news/goodies.php?chemin' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/22381/info PortailPHP is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected...