2486 matches found
Hobbit Monitor config Method Traversal Arbitrary File Access
The version of the Hobbit Monitor daemon installed on the remote host does not properly filter the argument to the 'config' command of directory traversal sequences. An unauthenticated attacker can leverage this flaw to retrieve arbitrary files from the affected host subject to the privileges of...
IceWarp < 5.6.1 lang_settings Parameter Remote File Inclusion (deprecated)
Binary data 3688.prm...
WinSCP URI Handler Arbitrary File Access
According to its version, the WinSCP install on the remote host allows a remote attacker to automatically initiate a file transfer to or from the affected host or to append log information to an existing file, provided that the user can be tricked into clicking on a malicious link. C Tenable...
security flaw
KDE Display Manager KDM in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via a symlink attack related to the session type for login...
WinSCP 3.8.1 - URI Handler Arbitrary File Access
WinSCP 3.8.1 - URI Handler Arbitrary File Access source: https://www.securityfocus.com/bid/18384/info WinSCP is prone to an arbitrary file-access vulnerability. An attacker can exploit this issue to upload arbitrary files to a victim user's computer or to download arbitrary files from the victim'...
WinSCP 3.8.1 - URI Handler Arbitrary File Access
source: https://www.securityfocus.com/bid/18384/info WinSCP is prone to an arbitrary file-access vulnerability. An attacker can exploit this issue to upload arbitrary files to a victim user's computer or to download arbitrary files from the victim's computer in the context of the vulnerable...
wodSFTP ActiveX Arbitrary File Access
The Windows remote host contains the wodSFTP ActiveX control, which provides SFTP functionality to applications that use it and is marked as 'safe for scripting'. A remote attacker may be able to use this control to store files on the remote filesystem or retrieve files from it by means of a...
Resin viewfile Servlet Arbitrary File Disclosure
The remote host is running Resin, an application server. The installation of Resin on the remote host includes a servlet, named 'viewfile', that lets an unauthenticated, remote attacker view any file within the web root directory on the affected host. This could lead to a loss of confidentiality...
Design/Logic Flaw
The ActiveX version of FrontRange iHEAT allows remote authenticated users to run arbitrary programs or access arbitrary files on the host machine by uploading a file with an extension that is not associated with an application, and selecting a file from the "Open With..." dialog...
sa-caucho.txt
ScanAlert Security Advisory http://www.scanalert.com Caucho Resin Multiple Vulnerabilities - Arbitrary File Access & Information Disclosure Date: 5/16/06 Vendor: Caucho Package: Resin Version: 3.0.17 and 3.0.18 Vendor Confirmed Credit: ScanAlerts Security and Enterprise Services Teams. Risk:...
ScanAlert Security Advisory
ScanAlert Security Advisory http://www.scanalert.com Caucho Resin Multiple Vulnerabilities - Arbitrary File Access & Information Disclosure Date: 5/16/06 Vendor: Caucho Package: Resin Version: 3.0.17 and 3.0.18 – Vendor Confirmed Credit: ScanAlert’s Security and Enterprise Services Teams. Risk:...
Asterisk Recording Interface (ARI) misc/audio.php recording Parameter Traversal Arbitrary File Access
The remote host is running Asterisk Recording Interface ARI, a web-based portal for the Asterisk PBX software. The version of ARI installed on the remote host reportedly allows an unauthenticated attacker to retrieve arbitrary sound files, such as voicemail messages, and to determine the existenc...
SAXoPRESS pbcs.dll url Parameter Traversal Arbitrary File Access
The remote host is running SAXoPRESS or Publicus, web content management systems commonly used by newspapers. The installation of SAXoPRESS / Publicus on the remote host fails to validate user input to the 'url' parameter of the 'apps/pbcs.dll' script. An attacker can exploit this issue to access...
Authorization
Unspecified vulnerability in SunPlex Manager in Sun Cluster 3.1 4/04 allows local users with solaris.cluster.gui authorization to view arbitrary files via unspecified vectors...
Claroline 1.x - 'rqmkhtml.php' Information Disclosure
source: https://www.securityfocus.com/bid/17343/info Claroline is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerabl...
Directory traversal
Directory traversal vulnerability in dir.php in Explorer XP allows remote attackers to read arbitrary files via the chemin parameter...
ATutor < 1.5.1-pl1 Multiple Flaws
The remote web server contains a PHP application that is prone to multiple flaws. The remote host is running ATutor, an open-source web-based Learning Content Management System LCMS written in PHP. The version of ATutor installed on the remote host may be vulnerable to arbitrary command execution...
cutenews 1.4.1 Arbitrary File Access
cutenews 1.4.1 Arbitrary File Access Cute news is a powerful and easy for using news management system that use flat files to store its database. It supports comments, archives, search function, image uploading, backup function, IP banning, flood protection ... http://cutephp.com Credit: The...
CuteNews inc/function.php archive Parameter Arbitrary File Access
The version of CuteNews installed on the remote host fails to properly sanitize the 'archive' parameter before using it to read a news file and return it. An unauthenticated, remote attacker may be able to leverage this issue to read arbitrary files on the remote host subject to permissions of th...
Simple PHP Blog 0.4.7.1 - Remote Command Execution
Simple PHP Blog 0.4.7.1 - Remote Command Execution !/usr/bin/perl use IO::Socket; print "Simple PHP Blog this works with magicquotesgpc = Off\r\n\r\n"; short explaination: we have this code in install05.php: ... script is not deleted after installation, so, if magicquotesgpc = Off, you can includ...