2417 matches found
Golden FTP Server Pro GET Traversal Arbitrary File Access
The version of Golden FTP Server installed on the remote host is prone to a directory traversal attack. Specifically, an attacker can read files located outside a share with '..' sequences subject to the privileges of the FTP server process. TRUSTED...
Yawcam Web Server Traversal Arbitrary File Access
The remote host is running Yawcam, yet another web cam software. The installed version of Yawcam is vulnerable to a directory traversal flaw. By exploiting this issue, an attacker may be able to gain access to material outside of the web root. C Tenable Network Security, Inc. include"compat.inc";...
CVE-2005-1238
CVE-2005-1238 affects the built-in FTP server for IBM iSeries AS/400 systems. The root cause is failure to enforce a restricted document root, enabling an attacker to read or write arbitrary files, including sensitive QSYS databases, by sending a full pathname in a GET or PUT request. Impact per ...
RadScripts RadBids Gold 2.0 - index.php?read Traversal Arbitrary File Access
RadScripts RadBids Gold 2.0 - index.php?read Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/13080/info RadBids Gold is reported prone to multiple vulnerabilities. These issues include arbitrary file disclosure, cross-site scripting, and SQL injection. The following...
RadScripts RadBids Gold 2.0 - 'index.php?read' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/13080/info RadBids Gold is reported prone to multiple vulnerabilities. These issues include arbitrary file disclosure, cross-site scripting, and SQL injection. The following specific vulnerabilities were identified: A remote attacker can disclose arbitrar...
osCommerce file_manager.php filename Parameter Traversal Arbitrary File Access
The remote host is running osCommerce, a widely installed open source shopping e-commerce solution. The remote version of this software is vulnerable to a directory traversal flaw which may be exploited by an attacker to read arbitrary files on the remote server with the privileges of the web...
LimeWire < 4.8.0 Directory Traversal Arbitrary File Access
Binary data 2710.prm...
CProxy Directory Traversal Arbitrary File Access / DoS
Binary data 2670.prm...
CVE-2004-1721
The 1 function.php or 2 function.view.php scripts in Merak Mail Server 5.2.7 allow remote attackers to read arbitrary PHP files via a direct HTTP request to port 32000...
OpenConnect WebConnect 6.46.5 - jretest.html Traversal Arbitrary File Access
OpenConnect WebConnect 6.46.5 - jretest.html Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/12613/info OpenConnect WebConnect is reported prone to multiple vulnerabilities. The following individual issues are reported: WebConnect is reported prone to a remote denial of...
Knox Arkeia Network Backup Agent Default Account
The remote host is running Arkeia Network Backup agent, used for backups of the remote host. The remote version of this agent contains a default account that may allow an attacker to gain read/write arbitrary files on the remote system with the privileges of the Arkeia daemon, usually root. C...
CVE-2004-1583
Directory traversal vulnerability in the FTP server in TriDComm 1.3 and earlier allows remote attackers to read or write arbitrary files via a .. dot dot in FTP commands such as 1 DIR, 2 GET, or 3 PUT...
TrackerCam 5.12 - ComGetLogFile.php3?fm Traversal Arbitrary File Access
TrackerCam 5.12 - ComGetLogFile.php3?fm Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/12592/info TrackerCam is prone to multiple remote vulnerabilities, including buffer-overflow issues, a directory-traversal issue, an information-disclosure issue, an HTML-injection...
TrackerCam 5.12 - 'ComGetLogFile.php3?fm' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/12592/info TrackerCam is prone to multiple remote vulnerabilities, including buffer-overflow issues, a directory-traversal issue, an information-disclosure issue, an HTML-injection issue, and denial-of-service issues. A remote attacker could exploit these...
DSA-686-1 gftp - missing input sanitising
Bulletin has no description...
security flaw
Directory traversal vulnerability in the truepath function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via ".../....///" sequences, which are not properly cleansed by regular expressions that are intended to remove "../" and "./" sequences...
CVE-2005-0442
Directory traversal vulnerability in index.php for CubeCart 2.0.4 allows remote attackers to read arbitrary files via the language parameter...
CVE-2005-0367
Multiple directory traversal vulnerabilities in ArGoSoft Mail Server 1.8.7.3 allow remote authenticated users to read, delete, or upload arbitrary files via a .. dot dot in 1 the filename of an e-mail attachment, 2 the msgatt.rec file, 3 and the /msg, /delete, /folderadd, and /folderdelete...