2486 matches found
GuppY 4.5 - 'editorTypetool.php?meskin' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/15610/info GuppY is affected by multiple local file include and information disclosure vulnerabilities. An attacker may leverage these issues to execute arbitrary server-side script code that resides on an affected computer with the privileges of the Web...
GuppY 4.5 - 'nwlmail.php?lng' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/15610/info GuppY is affected by multiple local file include and information disclosure vulnerabilities. An attacker may leverage these issues to execute arbitrary server-side script code that resides on an affected computer with the privileges of the Web...
GuppY 4.5 - dbbatch.php?lng Traversal Arbitrary File Access
GuppY 4.5 - dbbatch.php?lng Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/15610/info GuppY is affected by multiple local file include and information disclosure vulnerabilities. An attacker may leverage these issues to execute arbitrary server-side script code that...
GuppY 4.5 - 'archbatch.php?lng' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/15610/info GuppY is affected by multiple local file include and information disclosure vulnerabilities. An attacker may leverage these issues to execute arbitrary server-side script code that resides on an affected computer with the privileges of the Web...
PHPWCMS 1.2.5 -DEV - login.php?form_lang Traversal Arbitrary File Access
PHPWCMS 1.2.5 -DEV - login.php?formlang Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/15436/info phpWCMS is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issu...
PHPWCMS 1.2.5 -DEV - imgdir Traversal Arbitrary File Access
PHPWCMS 1.2.5 -DEV - imgdir Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/15436/info phpWCMS is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to obtain...
[TKADV2005-11-001] Multiple vulnerabilities in PHPlist
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: Multiple vulnerabilities in PHPlist Name: TKADV2005-11-001 Revision: 1.0 Release Date: 2005/11/07 Last Modified: 2005/11/07 Author: Tobias Klein tk at trapkit.de Affected Software: PHPlist all versions = 2.10.1 Risk: Critical High x Medium x...
PHP mylog.html/mlog.html read arbitrary file
The remote host is running PHP/FI. The remote version of this software contains a flaw in the files mylog.html/mlog.html than can allow a remote attacker to view arbitrary files on the remote host. OpenVAS Vulnerability Test $Id: phparbitraryfileaccess.nasl 5781 2017-03-30 08:15:57Z cfi $...
IlohaMail Arbitrary File Access via Session Variable Vulnerability
The target is running at least one instance of IlohaMail version 0.7.11 or earlier. Such versions contain a flaw in the processing of the session variable that allows an unauthenticated attacker to retrieve arbitrary files available to the web user, provided the filesystem backend is in use...
IlohaMail Arbitrary File Access via Session Variable Vulnerability
The target is running at least one instance of IlohaMail version 0.7.11 or earlier. Such versions contain a flaw in the processing of the session variable that allows an unauthenticated attacker to retrieve arbitrary files available to the web user, provided the filesystem backend is in use...
IlohaMail Arbitrary File Access via Language Variable
The target is running at least one instance of IlohaMail version 0.7.10 or earlier. Such versions contain a flaw in the processing of the language variable that allows an unauthenticated attacker to retrieve arbitrary files available to the web user. SPDX-FileCopyrightText: 2004-2005 George A...
CuteNews <= 1.4.1 Directory Traversal Arbitrary File Access
Binary data 3279.prm...
IlohaMail Arbitrary File Access via Language Variable
The target is running at least one instance of IlohaMail version 0.7.10 or earlier. Such versions contain a flaw in the processing of the language variable that allows an unauthenticated attacker to retrieve arbitrary files available to the web user. OpenVAS Vulnerability Test $Id:...
CuteNews 1.4.1 - template Traversal Arbitrary File Access
CuteNews 1.4.1 - template Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/15295/info CuteNews is affected by a directory traversal vulnerability. An unauthorized attacker can retrieve or upload arbitrary files by supplying directory traversal strings '../' through an...
CuteNews 1.4.1 - 'show_archives.php' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/15295/info CuteNews is affected by a directory traversal vulnerability. An unauthorized attacker can retrieve or upload arbitrary files by supplying directory traversal strings '../' through an affected URI parameter. Exploitation of this vulnerability...
ATutor < 1.5.1-pl1 Multiple Remote Vulnerabilities (XSS, RFI, Command Exe)
The remote host is running ATutor, an open source, web-based Learning Content Management System LCMS written in PHP. The version of ATutor installed on the remote host may be vulnerable to arbitrary command execution, arbitrary file access, and cross-site scripting attacks. Successful exploitatio...
Gallery main.php g2_itemId Parameter Traversal Arbitrary File Access
The version of Gallery hosted on the remote web server fails to sanitize user-supplied input to the 'g2itemId' parameter of the 'main.php' script before using it to read cached files. If PHP's 'displayerrors' setting is enabled, an attacker can exploit this flaw to read arbitrary files on the...
Polipo < 0.9.9 Unspecified Traversal Arbitrary File Access
The remote host is running the Polipo caching web proxy. In addition to caching web pages, the software also functions as a web server for providing access to documentation, cached pages, etc. The built-in web server in the installed version of Polipo fails to filter directory traversal sequences...
3Com Network Supervisor Traversal Arbitrary File Access
The remote host is running 3Com Network Supervisor, a network monitoring application. The version of 3Com Network Supervisor installed on the remote host is prone to a directory traversal attack and, as such, allows an unauthenticated attacker to read arbitrary files on the same filesystem as the...
PHPMyFAQ 1.5.1 - Local File Inclusion
source: https://www.securityfocus.com/bid/14929/info PHPMyFAQ is prone to a local file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary server-side script code that resides o...