2412 matches found
Xedus Web Server 1.0 Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/11071/info It is reported that Xedus is susceptible to multiple vulnerabilities. The first reported issue is a denial of service vulnerability. The affected application is unable to service multiple simultaneous...
SiteBar <= 3.3.8 translator.php dir Parameter Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/26126/info SiteBar is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input. These issues include: - A local file-include vulnerability - Multiple...
WinSCP 3.8.1 URI Handler Remote Arbitrary File Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18384/info WinSCP is prone to an arbitrary file-access vulnerability. An attacker can exploit this issue to upload arbitrary files to a victim user's computer or to download arbitrary files from the victim's computer in t...
Sambar Server 6.1 beta 2 showini.asp Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/10444/info Sambar Server is reportedly prone to multiple vulnerabilities. These issues may allow an attacker to access sensitive files and carry out directory traversal and cross-site scripting attacks. These issues requi...
NULL NUKE CMS 2.2 - Multiple Vulnerabilities
No description provided by source. ? NULL NUKE CMS v2.2 Multiple Vulnerabilities Vendor: nullwanton Product web page: http://sourceforge.net/projects/nullnuke/ Affected version: 2.2 and 2.1 rc3 Summary: NULL-8x3-NUKE is a fast, powerful and secure cross platform CMS for windows and Linux using ba...
LoudBlog 0.41 index.php template Parameter Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/17023/info Loudblog is prone to multiple input-validation vulnerabilities: - An SQL-injection vulnerability. - Two local file-include vulnerabilities. - An information-disclosure vulnerability. These issues allow remote...
Accellion File Transfer Appliance web_client_user_guide.html lang Parameter Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/38176/info Accellion File Transfer Appliance is prone to multiple remote vulnerabilities, including: - Multiple privilege-escalation issues - A directory-traversal issue - An HTML-injection issue - A remote...
IOServer "Root Directory" Trailing Backslash Multiple Vulnerabilities
No description provided by source. ===================================================================== BEGIN Foofus.net Security Advisory: foofus-20120817 BEGIN ===================================================================== Title: IOServer Root Directory Trailing Backslash Web Server Vul...
Pegasi Web Server 0.2.2 Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/9847/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. A successful cross-site scripting attack may...
LogiSphere 0.9.9 j viewsource.jsp source Parameter Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/15807/info LogiSphere is prone to multiple directory traversal vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to...
Coppermine Photo Gallery 1.x modules.php startdir Parameter Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/10253/info Coppermine Photo Gallery is reported prone to multiple input-validation vulnerabilities, some of which may lead to arbitrary command execution. These issues occur because the application fails to properly...
Acme.Serve 1.7 - Arbitrary File Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2809/info Acme.Serve is a free, open-source, embeddable webserver written in Java. It is small, is intended to provide minimal functionality, and is fully compatible with JavaServer. Acme.Serve 1.7 comes with a webserver...
PHProg 1.0 index.php lang Parameter Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/19957/info PHProg is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data and may allow an attacker to carry out cross-site scripting and local file-include attacks...
phpCOIN 1.2 auxpage.php page Parameter Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/12917/info Multiple remote input validation vulnerabilities affect phpCoin. Multiple SQL injection vulnerabilities have been reported. An attacker may leverage these issues to manipulate and view arbitrary database...
W-Agora 4.1.6 modules.php file Parameter Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/6595/info A file disclosure vulnerability has been reported for W-Agora. It has been reported that W-Agora does not adequately sanitize some user-supplied input. An attacker can construct a URL consisting of dot-dot-slash...
LoveCMS 1.4 install/index.php step Parameter Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/22675/info LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issue. An attacker ca...
WinSCP <= 4.0.3 URL Protocol Handler Arbitrary File Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25655/info WinSCP is prone to a vulnerability that lets an attacker upload arbitrary files to a victim's computer or to download arbitrary files from the victim's computer in the context of the vulnerable application. Thi...
PortailPHP 2 mod_news/index.php chemin Parameter Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/22381/info PortailPHP is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary...
Alkacon OpenCMS 7.0.3 - logfileViewSettings.jsp filePath.0 Parameter Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/28152/info Alkacon OpenCms is prone to multiple input-validation vulnerabilities, including one cross-site scripting issue and a file-disclosure issue, because the application fails to properly sanitize user-supplied inpu...
WebCom datakommunikation Guestbook 0.1 rguest.exe Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/2024/info The freeware guestbook package from freeware.webcom.se provides a web-based guestbook feature, using CGI. Some versions of this guestbook undetermined at the time of writing are vulnerable to an attack allowing ...