assetman24-lfi.txt

+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= | |AssetMan 2.4a = downloadpdf.php Remote File Disclosure Vulnerability | |Script: AssetMan | |Verson: 2.4a | |URL: http://www.bctree.com/assetman/assetman-2.4a.zip | |Discover: BorN To K!LL |...

CVE-2007-1427

Directory traversal vulnerability in downloadpdf.php in AssetMan 2.4a and earlier allows remote attackers to read arbitrary files via a .. dot dot in the pdffile parameter...

CVE-2007-1427

CVE-2007-1427 describes a directory traversal vulnerability in AssetMan 2.4a and earlier, located in download_pdf.php. The issue arises from the pdf_file parameter, where a .. (dot dot) path traversal allows a remote attacker to read arbitrary files on the server. The entry notes impact as readin...

CVE-2007-1427

Directory traversal vulnerability in downloadpdf.php in AssetMan 2.4a and earlier allows remote attackers to read arbitrary files via a .. dot dot in the pdffile parameter...

AssetMan <= 2.4a (download_pdf.php) Remote File Disclosure Vuln

No description provided by source. +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= | |AssetMan 2.4a = downloadpdf.php Remote File Disclosure Vulnerability | |Script: AssetMan | |Verson: 2.4a | |URL: http://www.bctree.com/assetman/assetman-2.4a.zip | |Discover: BorN To K!LL |...

AssetMan &lt;= 2.4a (download_pdf.php) Remote File Disclosure Vuln

No description provided by source. +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= | |AssetMan 2.4a = downloadpdf.php Remote File Disclosure Vulnerability | |Script: AssetMan | |Verson: 2.4a | |URL: http://www.bctree.com/assetman/assetman-2.4a.zip | |Discover: BorN To K!LL |...

Cross site scripting

UNVERIFIABLE NOTE: this issue does not contain any verifiable or actionable details. Cross-site scripting XSS vulnerability in John Frank Asset Manager AssetMan 2.4a and earlier allows remote attackers to inject arbitrary web script or HTML via "any of its input." NOTE: the original disclosure is...