w-Agora index.php site Parameter Traversal Arbitrary File Access

The remote host is running w-agora, a web-based forum application written in PHP. The remote version of this software is prone to directory traversal attacks. A remote attacker could request a specially crafted URL to read arbitrary files on the remote system with the privileges of the web server...

W-Agora < 4.2.1 index.php site Parameter Traversal Arbitrary File Access

Binary data 3171.prm...

Atomic Photo Album apa_phpinclude.inc.php apa_module_basedir Parameter Remote File Inclusion

The remote host is running Atomic Photo Album, a free, PHP-based photo gallery. The installed version of Atomic Photo Album allows remote attackers to control the 'apamodulebasedir' variable used when including PHP code in the 'apaphpinclude.inc.php' script. By leveraging this flaw, an attacker m...

webadmin.php show Parameter Arbitrary File Access

webadmin.php was found on your web server. In its current configuration, this file manager CGI gives access to the whole filesystem of the machine to anybody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid18586;...

Apple Keynote Presentation < 2.0.2 keynote: URI Handler Arbitrary File Access

The remote host contains a version of Keynote 2 which is older than 2.0.2. The installed version is affected by a security issue which may allow an attacker to send a rogue keynote file containing malformed URI links in it. An attacker can exploit this issue to read and upload arbitrary local fil...

TFTP Traversal Arbitrary File Access

The TFTP Trivial File Transfer Protocol server running on the remote host is vulnerable to a directory traversal attack that allows an attacker to read arbitrary files on the remote host by prepending their names with directory traversal sequences. %NASLMINLEVEL 70300 C Tenable Network Security,...

PostNuke 0.75/0.76 Blocks Module - Directory Traversal

source: https://www.securityfocus.com/bid/13636/info PostNuke Blocks module is affected by a directory traversal vulnerability. The problem presents itself when an attacker passes a name for a target file, along with directory traversal sequences, to the affected application. An attacker may...

NETFile FTP/Web Server Directory Traversal Arbitrary File Access

The version of NETFile FTP/Web server installed on the remote host is prone to directory traversal attacks. Specifically, an attacker can create directories outside the server's folder path with a specially crafted URL. The attacker may also be able to delete arbitrary files and directories on th...

RaidenFTPD urlget Command Traversal Arbitrary File Access

The remote host is running the RaidenFTPD FTP server. This version has a directory traversal vulnerability that could allow an attacker to read arbitrary files outside of the intended FTP root. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18225; scriptversion"1.18"...

Software602 602Pro LAN SUITE < 2004.0.05.0509 Directory Traversal Arbitrary File Access

Binary data 2883.prm...

Golden FTP Server Pro GET Traversal Arbitrary File Access

The version of Golden FTP Server installed on the remote host is prone to a directory traversal attack. Specifically, an attacker can read files located outside a share with '..' sequences subject to the privileges of the FTP server process. TRUSTED...

Yawcam Web Server Traversal Arbitrary File Access

The remote host is running Yawcam, yet another web cam software. The installed version of Yawcam is vulnerable to a directory traversal flaw. By exploiting this issue, an attacker may be able to gain access to material outside of the web root. C Tenable Network Security, Inc. include"compat.inc";...

CVE-2005-1238

CVE-2005-1238 affects the built-in FTP server for IBM iSeries AS/400 systems. The root cause is failure to enforce a restricted document root, enabling an attacker to read or write arbitrary files, including sensitive QSYS databases, by sending a full pathname in a GET or PUT request. Impact per ...

RadScripts RadBids Gold 2.0 - index.php?read Traversal Arbitrary File Access

RadScripts RadBids Gold 2.0 - index.php?read Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/13080/info RadBids Gold is reported prone to multiple vulnerabilities. These issues include arbitrary file disclosure, cross-site scripting, and SQL injection. The following...

RadScripts RadBids Gold 2.0 - 'index.php?read' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/13080/info RadBids Gold is reported prone to multiple vulnerabilities. These issues include arbitrary file disclosure, cross-site scripting, and SQL injection. The following specific vulnerabilities were identified: A remote attacker can disclose arbitrar...

osCommerce file_manager.php filename Parameter Traversal Arbitrary File Access

The remote host is running osCommerce, a widely installed open source shopping e-commerce solution. The remote version of this software is vulnerable to a directory traversal flaw which may be exploited by an attacker to read arbitrary files on the remote server with the privileges of the web...

LimeWire < 4.8.0 Directory Traversal Arbitrary File Access

Binary data 2710.prm...

CProxy Directory Traversal Arbitrary File Access / DoS

Binary data 2670.prm...

CVE-2004-1721

The 1 function.php or 2 function.view.php scripts in Merak Mail Server 5.2.7 allow remote attackers to read arbitrary PHP files via a direct HTTP request to port 32000...

OpenConnect WebConnect 6.46.5 - jretest.html Traversal Arbitrary File Access

OpenConnect WebConnect 6.46.5 - jretest.html Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/12613/info OpenConnect WebConnect is reported prone to multiple vulnerabilities. The following individual issues are reported: WebConnect is reported prone to a remote denial of...