CodeMeter < 4.30.498.504 Virtual Directory Traversal Arbitrary File Access

According to its self-reported version, the CodeMeter WebAdmin server running on the remote host is prior to 4.30d 4.30.498.504. It is, therefore, affected by a directory traversal vulnerability due to a failure to properly sanitize HTTP requests for files in virtual directories. An...

Manx 1.0.1 - adminadmin_pages.php?Filename Traversal Arbitrary File Access

Manx 1.0.1 - adminadminpages.php?Filename Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/50839/info Manx is prone to multiple cross-site scripting and directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these...

Manx 1.0.1 - '/admin/admin_pages.php?Filename' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/50839/info Manx is prone to multiple cross-site scripting and directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues will allow an attacker to execute arbitrary script code in the browser...

Directory traversal

Directory traversal vulnerability in Cisco Unified Communications Manager CUCM 5.x and 6.x before 6.15SU2, 7.x before 7.15bSU2, and 8.x before 8.03, and Cisco Unified Contact Center Express aka Unified CCX or UCCX and Cisco Unified IP Interactive Voice Response Unified IP-IVR before 6.01SR1ES8,...

IceWarp Mail Server 10.3.2 server/webmail.php Soap Message Parsing - Arbitrary File Disclosure

source: https://www.securityfocus.com/bid/49753/info IceWarp Web Mail is prone to multiple information-disclosure vulnerabilities. Attackers can exploit these issues to gain access to potentially sensitive information, and possibly cause denial-of-service conditions; other attacks may also be...

Chyrp 2.x - includeslibgz.php?File Traversal Arbitrary File Access

Chyrp 2.x - includeslibgz.php?File Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/48672/info Chyrp is prone to multiple cross-site scripting vulnerabilities, a local file-include vulnerability, an arbitrary file-upload vulnerability, and a directory-traversal...

Chyrp 2.x - '/includes/lib/gz.php?File' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/48672/info Chyrp is prone to multiple cross-site scripting vulnerabilities, a local file-include vulnerability, an arbitrary file-upload vulnerability, and a directory-traversal vulnerability. An attacker may leverage these issues to execute arbitrary...

ManageEngine ServiceDesk Plus FileDownload.jsp FILENAME Parameter Traversal Arbitrary File Access

The installed version of ManageEngine ServiceDesk Plus fails to sanitize user-supplied input to the 'FILENAME' parameter of the 'workorder/FileDownload.jsp' script of directory traversal sequences when 'module' is set to 'agent' before using it to return the contents of a file. An unauthenticated...

ManageEngine SupportCenter Plus FileDownload.jsp path Parameter Traversal Arbitrary File Access

The installed version of ManageEngine SupportCenter Plus fails to sanitize user-supplied input to the 'path' parameter of the 'workorder/FileDownload.jsp' script of directory traversal sequences when 'module' is set to 'Request' before using it to return the contents of a file. An unauthenticated...

VMware Fusion < 3.1.3 (VMSA-2011-0009 / VMSA-2011-0011)

The version of VMware Fusion installed on the Mac OS X host is earlier than 3.1.3. As such, it is reportedly affected by the following three security vulnerabilities : - An attacker with access to a Guest operating system can determine if a path exists in the Host filesystem and whether it's a fi...

SAP NetWeaver BW - XML External Entity

Application: SAP BW Versions Affected: SAP BASIS 6.40/7.02 maybe others Vendor URL: http://www.sap.com Bugs:XML External Entity Exploits: YES Reported: 13.05.2011 Vendor response: 14.05.2011 Date of Public Advisory: 30.06.2012 Reference: SAP Security Note 1597066 Author: Alexey Tyurin ERPScan...

CVE-2011-1589

Directory traversal vulnerability in Path.pm in Mojolicious before 1.16 allows remote attackers to read arbitrary files via a %2f..%2f encoded slash dot dot slash in a URI...

IGSS Data Server Directory Traversal Arbitrary File Access

Binary data scadaigssdirtraversal.nbin...

Majordomo 2 _list_file_get() Function Traversal Arbitrary File Access

The version of Majordomo 2 on the remote host fails to sanitize input to the 'extra' parameter of the 'mjwwwusr' script before using it to return the contents of a file. An attacker can leverage this issue using a directory traversal sequence to view arbitrary files on the affected host within th...

Directory traversal

Directory traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to read arbitrary files via a...

MODx 'ucfg' Parameter Arbitrary File Access

The installed version of MODx allows access to arbitrary files because it fails to perform sufficient validation on 'ucfg' parameter in 'assets/snippets/ajaxSearch/ajaxSearchPopup.php'. By supplying directory traversal strings such as '..%2F' in a specially crafted AjaxSearch 'POST' request, it i...

CVE-2010-4634

Directory traversal vulnerability in osTicket 1.6 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter to module.php, a different vector than CVE-2005-1439. NOTE: this issue has been disputed by a reliable third party...

FTP Server Traversal Arbitrary File Access (RETR)

The remote FTP server allows a user to retrieve files outside his home directory using a specially crafted 'RETR' command with traversal sequences. A remote attacker could exploit this flaw to gain access to arbitrary files. TRUSTED...

AT-TFTP Server 1.8 Directory Traversal Vulnerability - Active Check

AT-TFTP Server is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SEO Tools Plugin for WordPress 'file' Parameter Arbitrary File Access

The version of the SEO Tools plugin for WordPress installed on the remote host does not sanitize input to the 'file' parameter of the 'feedcommander/getdownload.php' script before using it to return the contents of a file. An unauthenticated, remote attacker can exploit this issue to disclose the...