2548 matches found
PortailPHP 2 - '/mod_news/goodies.php?chemin' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/22381/info PortailPHP is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected...
Fedora Core 5 : elinks-0.11.0-2.4 (2006-1277)
Tue Nov 21 2006 Karel Zak 0.11.0-2.4 - fix 215734: CVE-2006-5925 elinks smb protocol arbitrary file access - Mon May 29 2006 Karel Zak 0.11.0-2.3 - add buildrequires bzip2-devel, expat-devel,libidn-devel Note that Tenable Network Security has extracted the preceding description block directly...
CVE-2007-0118
CVE-2007-0118: Multiple absolute path traversal vulnerabilities affect EditTag 1.2. Remote attackers can read arbitrary files by supplying an absolute pathname in the file parameter to one of four scripts: edittag.cgi, edittag.pl, edittag_mp.cgi, or edittag_mp.pl. The NVD entry documents the vuln...
EditTag 1.2 - 'edittag_mp.pl?file' Arbitrary File Disclosure
source: https://www.securityfocus.com/bid/21890/info EditTag is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow a remote attacker to access any file on the affected webserver. Versio...
Microsoft Internet Explorer TIF Folder arbitrary file access vulnerability
Overview A vulnerability in the way Microsoft Internet Explorer handles drag and drop operations may allow access of arbitrary files within the Temporary Internet Files folder. Description Microsoft Internet Explorer contains a vulnerability that could be exploited when handling drag and drop...
CVE-2006-6028
CVE-2006-6028 describes a directory traversal in DoSePa 1.0.4 (textview.php) that allows remote attackers to read arbitrary files by manipulating the file parameter with a .. sequence or an absolute path. Affected software: DoSePa 1.0.4, textview.php. Root cause: improper validation of the file p...
Critical: Red Hat Security Advisory: elinks security update
An updated elinks package that corrects a security vulnerability is now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Elinks is a text mode Web browser used from the command line that supports renderi...
[Full-disclosure] RSS Injection in Sage part 2
RSS Injection is Sage part 2 2 months ago, both pdp and myself released a vulnerability and proof of concept exploit for Sage. see: http://michaeldaw.org/md-hacks/cross-context-scripting-with-sage/. This issue was resolved in Sage release 1.3.7 http://mozdev.org/bugs/showbug.cgi?id=15101. I found...
FreeWebShop 2.1/2.2 - 'index.php?page' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/20969/info FreeWebShop is prone to multiple input-validation vulnerabilities, including a cross-site scripting issue and a local file-include issue. An attacker can exploit these issues to view files, execute local scripts, steal cookie-based authenticati...
IronMail IronWebMail IM_FILE Identifier Encoded Traversal Arbitrary File Access
The remote host appears to be an IronMail appliance, which is intended to protect enterprise-class email servers from spam, viruses, and hackers. The webmail component of the remote IronMail device does not properly validate pathname references included in a URL before using them to return the...
Adobe Breeze Directory Traversal Arbitrary File Access
The remote web server appears to be Adobe Breeze, a web-based video conferencing system. The version of Adobe Breeze installed on the remote host reportedly has an issue with URL parsing. While specific information about the issue is currently not available, a remote attacker may be able to explo...
CakePHP vendors.php file Parameter Traversal Arbitrary File Access
The remote host is running CakePHP, an open source rapid development framework for PHP. The version of CakePHP on the remote host allows directory traversal sequences in the 'file' parameter of the 'js/vendors.php' script. An unauthenticated attacker may be able to leverage this flaw to view...
NeoSys Neon Webmail for Java 5.065.07 - downloadfile Servlet Traversal Arbitrary File Access
NeoSys Neon Webmail for Java 5.065.07 - downloadfile Servlet Traversal Arbitrary File Access...
NeoSys Neon Webmail for Java 5.06/5.07 - 'downloadfile' Servlet Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/20109/info Neon WebMail is prone to multiple input-validation vulnerabilities because it fails to sanitize user-supplied input. These issues include: - an arbitrary-file-upload vulnerability - an arbitrary-email-manipulation vulnerability - multiple...
CVE-2006-4878
The CVE-2006-4878 issue affects PHPp (David Bennett PHP-Post) 1.0 and earlier, with a directory traversal vulnerability in footer.php. A remote attacker can read arbitrary local files by manipulating the template parameter to include a .. sequence. The note indicates exposure was later reported t...
Site@School Multiple Script cmsdir Parameter Remote File Inclusion
The remote host is running Site@School, an open source, PHP-based, content management system intended for primary schools. The version of Site@School installed on the remote host fails to sanitize input to the 'cmsdir' parameter before using it to include PHP code in several scripts. Provided PHP...
PHProg 1.0 - 'index.php?lang' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/19957/info PHProg is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data and may allow an attacker to carry out cross-site scripting and local file-include attacks. Version 1.0 of PHProg is reported...
CubeCart < 3.0.13 Multiple Vulnerabilities
Binary data 3736.prm...
WebAdmin < 3.2.5 Multiple Vulnerabilities
The remote host is running WebAdmin, a web-based remote administration tool for Alt-N MDaemon. According to its banner, the installed version of WebAdmin fails to properly filter directory traversal sequences from the 'file' parameter of the 'logfileview.wdm' and 'configfileview.wdm' scripts. A...