CVE-2006-2633

The CVE-2006-2633 entry describes an absolute path traversal in ByteHoard 2.1 and earlier, where the copy action in index.php can be exploited by remote authenticated users to create or overwrite files in other users’ directories by supplying the absolute directory path in infolder and the filena...

CVE-2006-2632

CVE-2006-2632 is an XSS vulnerability in Andrew Godwin ByteHoard 2.1 and earlier. The issue allows remote authenticated users to inject arbitrary web script or HTML via file descriptions. The connected documents confirm the affected software/component and the root cause (client-side script inject...

CVE-2006-2632

Cross-site scripting XSS vulnerability in Andrew Godwin ByteHoard 2.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via file descriptions...

ByteHoard <= 2.1 multiple vulnerabilities

ByteHoard = 2.1 multiple vulnerabilities Discovered by: Nomenumbra Date: 23/5/2006 impact:high file manipulation,privilege escalation,possible defacement ByteHoard versions up to 2.1 are prone to multiple vulnerabilities, including directory traversal. 0x00 Directory traversal: Users are able to...

CVE-2003-1153

The CVE-2003-1153 entry concerns byteHoard versions 0.7 and 0.71, where an attacker can remotely enumerate files and directories by issuing a direct request to files.inc.php. The underlying issue is a lack of access control for directory/file listing, resulting in information disclosure (partial ...

CVE-2003-1153

byteHoard 0.7 and 0.71 allows remote attackers to list arbitrary files and directories via a direct request to files.inc.php...

CVE-2003-1499

Directory traversal vulnerability in index.php in Bytehoard 0.7 allows remote attackers to read arbitrary files via a .. dot dot in the infolder parameter...

CVE-2003-1153

byteHoard 0.7 and 0.71 allows remote attackers to list arbitrary files and directories via a direct request to files.inc.php...

[Full-Disclosure] ByteHoard Directory Traversal Vulnerability

ByteHoard Directory Traversal Vulnerability 17 October 2003 Original Advisory http://www.sintelli.com/adv/sa-2003-03-bytehoard.pdf Background ByteHoard is online storage system whereby users can upload and download their files from anywhere with an Internet connection. More information about the...

Bytehoard 0.7 - File Disclosure

source: https://www.securityfocus.com/bid/8850/info Bytehoard is prone to directory traversal attacks. This could potentially permit remote attackers to gain unauthorized access to sensitive files hosted on the system running the software...