2485 matches found
CVE-2004-2112
Directory traversal vulnerability in BremsServer 1.2.4 allows remote attackers to read arbitrary files via ".." dot dot sequences in the URL...
CVE-2004-1583
Directory traversal vulnerability in the FTP server in TriDComm 1.3 and earlier allows remote attackers to read or write arbitrary files via a .. dot dot in FTP commands such as 1 DIR, 2 GET, or 3 PUT...
CVE-2004-2021
Directory traversal vulnerability in filemanager.php in osCommerce 2.2 allows remote attackers to view arbitrary files via a .. dot dot in the filename argument...
CVE-2004-2628
Multiple directory traversal vulnerabilities in thttpd 2.07 beta 0.4, when running on Windows, allow remote attackers to read arbitrary files via a URL that contains 1 a hex-encoded backslash dot-dot sequence "%5C.." or 2 a drive letter such as "C:"...
CVE-2004-2750
Directory traversal vulnerability in browser.php in JBrowser 1.0 through 2.1 allows remote attackers to read arbitrary files via the directory parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
[Full-Disclosure] QNX crrtrap arbitrary file read/write vulnerability [RLSA_06-2004]
rfdslabs security advisory Title: QNX crrtrap arbitrary file read/write vulnerability RLSA06-2004 Versions: QNX RTOS 2.4, 4.25, 6.1.0, 6.2.0 + Update Patch A Vendor: http://www.qnx.com Date: Dec 11 2004 Author: Julio Cesar Fort julio NOSPAM rfdslabs com br 1. Introduction crrtrap is a tool to...
e_Board index2.cgi message Parameter Traversal Arbitrary File Access
The remote host is running eBoard, a web-based bulletin board system written in Perl. The version of eBoard running on the remote web server has a directory traversal vulnerability in the 'message' parameter of 'index2.cgi'. A remote attacker could exploit this to read sensitive information from...
Singapore Gallery < 0.9.11 Multiple Vulnerabilities
Singapore is a PHP based photo gallery web application. The remote version of this software is affected by multiple vulnerabilities that may allow an attacker to read arbitrary files on the remote host or to execute arbitrary PHP commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
SugarSales Multiple Module Traversal Arbitrary File Access
The remote version of this software has a vulnerability that may allow an attacker to read arbitrary files on the remote host with the privileges of the httpd user. The 'Users' module, 'Calls' module and index.php script are reported to be affected. %NASLMINLEVEL 70300 C Tenable Network Security,...
CVE-2004-0578
WinGate 5.2.3 build 901 and 6.0 beta 2 build 942, and other versions such as 5.0.5, allows remote attackers to read arbitrary files via leading slash // characters in a URL request to the wingate-internal directory...
Post-Nuke pnTresMailer Directory Traversal Arbitrary File Access
Binary data 2440.prm...
Brio Unix odscgi HTMLFile Parameter Traversal Arbitrary File Access
The Brio web application interface has a directory traversal in the component 'odscgi'. An attacker may exploit this flaw to read arbitrary files on the remote host by submitting a URL like : http://www.example.com/ods-cgi/odscgi?HTMLFile=../../../../../../etc/passwd %NASLMINLEVEL 70300 This scri...
PostNuke pnTresMailer codebrowserpntm.php Traversal Arbitrary File Access
The remote host is running a version of the pnTresMailer PostNuke module which is vulnerable to a directory traversal attack. An attacker may use this flaw to read arbitrary files on the remote web server, with the privileges of the web server process. %NASLMINLEVEL 70300 C Tenable Network...
phpMyAdmin < 2.5.6-rc1 Arbitrary File Access
Binary data 2419.prm...
phpMyAdmin < 2.2.1 'sql.php' Arbitrary File Access
Binary data 2418.prm...
PHP < 3.0 mylog.html/mlog.html Arbitrary File Access
The remote host is running PHP/FI. The remote version of this software contains a flaw in the files mylog.html/mlog.html that can allow a remote attacker to view arbitrary files on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
Cherokee Web Server URI Traversal Arbitrary File Access
The remote host is running Cherokee - a fast and tiny web server. The remote version of this software is vulnerable to directory traversal flaw when appending a '../' sequence to the web request. Additionally, this version fails to drop root privileges after it binds to listen port. Remote attack...
PHP 4.x5 - cURL open_basedir Restriction Bypass
PHP 4.x5 - cURL openbasedir Restriction Bypass source: https://www.securityfocus.com/bid/11557/info It is reported that cURL allows malicious users to bypass 'openbasedir' restrictions in PHP scripts. This issue is due to a failure of the cURL module to properly enforce PHPs 'openbasedir'...
CVE-2004-1603
cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to 1 read arbitrary files via the backup feature or 2 chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled...
[SECURITY] [DSA 600-1] New samba packages fix arbitrary file access
-------------------------------------------------------------------------- Debian Security Advisory DSA 600-1 [email protected] http://www.debian.org/security/ Martin Schulze October 7th, 2004 http://www.debian.org/security/faq -...