2415 matches found
Simple one-file Gallery - gallery.php?f Traversal Arbitrary File Access
Simple one-file Gallery - gallery.php?f Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/22700/info Simple one-file gallery is prone to multiple input-validation vulnerabilities, including a local file-include issue and a cross-site scripting issue. An attacker can exploi...
LoveCMS 1.4 - step Traversal Arbitrary File Access
LoveCMS 1.4 - step Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/22675/info LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issu...
LoveCMS 1.4 - load Traversal Arbitrary File Access
LoveCMS 1.4 - load Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/22675/info LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issu...
Plantilla - 'list_main_pages.php?nfolder' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/22669/info Simple Plantilla PHP is prone to multiple input-validation issues, including a local file-include vulnerability and an arbitrary file-upload vulnerability. Attackers can exploit the local file-include vulnerability using directory-traversal...
LifeType < 1.1.6 rss.php profile Parameter Traversal Arbitrary File Access
Binary data 3916.prm...
Mozilla Firefox < 0.0.9 'Plain Old Webserver' (POW) Directory Traversal Arbitrary File Access (deprecated)
Binary data 3910.prm...
PortailPHP 2 - mod_newsindex.php?chemin Traversal Arbitrary File Access
PortailPHP 2 - modnewsindex.php?chemin Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/22381/info PortailPHP is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an...
PortailPHP 2 - '/mod_news/goodies.php?chemin' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/22381/info PortailPHP is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected...
Fedora Core 5 : elinks-0.11.0-2.4 (2006-1277)
Tue Nov 21 2006 Karel Zak 0.11.0-2.4 - fix 215734: CVE-2006-5925 elinks smb protocol arbitrary file access - Mon May 29 2006 Karel Zak 0.11.0-2.3 - add buildrequires bzip2-devel, expat-devel,libidn-devel Note that Tenable Network Security has extracted the preceding description block directly...
CVE-2007-0118
CVE-2007-0118: Multiple absolute path traversal vulnerabilities affect EditTag 1.2. Remote attackers can read arbitrary files by supplying an absolute pathname in the file parameter to one of four scripts: edittag.cgi, edittag.pl, edittag_mp.cgi, or edittag_mp.pl. The NVD entry documents the vuln...
EditTag 1.2 - 'edittag_mp.pl?file' Arbitrary File Disclosure
source: https://www.securityfocus.com/bid/21890/info EditTag is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow a remote attacker to access any file on the affected webserver. Versio...
Microsoft Internet Explorer TIF Folder arbitrary file access vulnerability
Overview A vulnerability in the way Microsoft Internet Explorer handles drag and drop operations may allow access of arbitrary files within the Temporary Internet Files folder. Description Microsoft Internet Explorer contains a vulnerability that could be exploited when handling drag and drop...
CVE-2006-6028
CVE-2006-6028 describes a directory traversal in DoSePa 1.0.4 (textview.php) that allows remote attackers to read arbitrary files by manipulating the file parameter with a .. sequence or an absolute path. Affected software: DoSePa 1.0.4, textview.php. Root cause: improper validation of the file p...
Critical: Red Hat Security Advisory: elinks security update
An updated elinks package that corrects a security vulnerability is now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Elinks is a text mode Web browser used from the command line that supports renderi...
[Full-disclosure] RSS Injection in Sage part 2
RSS Injection is Sage part 2 2 months ago, both pdp and myself released a vulnerability and proof of concept exploit for Sage. see: http://michaeldaw.org/md-hacks/cross-context-scripting-with-sage/. This issue was resolved in Sage release 1.3.7 http://mozdev.org/bugs/showbug.cgi?id=15101. I found...
FreeWebShop 2.1/2.2 - 'index.php?page' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/20969/info FreeWebShop is prone to multiple input-validation vulnerabilities, including a cross-site scripting issue and a local file-include issue. An attacker can exploit these issues to view files, execute local scripts, steal cookie-based authenticati...
IronMail IronWebMail IM_FILE Identifier Encoded Traversal Arbitrary File Access
The remote host appears to be an IronMail appliance, which is intended to protect enterprise-class email servers from spam, viruses, and hackers. The webmail component of the remote IronMail device does not properly validate pathname references included in a URL before using them to return the...
Adobe Breeze Directory Traversal Arbitrary File Access
The remote web server appears to be Adobe Breeze, a web-based video conferencing system. The version of Adobe Breeze installed on the remote host reportedly has an issue with URL parsing. While specific information about the issue is currently not available, a remote attacker may be able to explo...
CakePHP vendors.php file Parameter Traversal Arbitrary File Access
The remote host is running CakePHP, an open source rapid development framework for PHP. The version of CakePHP on the remote host allows directory traversal sequences in the 'file' parameter of the 'js/vendors.php' script. An unauthenticated attacker may be able to leverage this flaw to view...