6 matches found
Directory traversal
Directory traversal vulnerability in collect.php in CYASK 3.x allows remote attackers to read arbitrary files via a .. dot dot in the neturl parameter...
CVE-2008-4151
Directory traversal vulnerability in collect.php in CYASK 3.x allows remote attackers to read arbitrary files via a .. dot dot in the neturl parameter...
CVE-2008-4151
CVE-2008-4151 : Directory traversal in collect.php of CYASK 3.x allows remote attackers to read arbitrary files via a .. in the neturl parameter. Impact: read access to files. The provided documents do not include remediation details or patch/version information. Exploitation status is not specif...
CYASK 3.x (collect.php neturl) Local File Disclosure Vulnerability
No description provided by source. This vulnerability leads to that the attacker can read any file on your webserver when it installs cyask. The $neturl variable in collect.php is short of enough check. When the attacker registers a new user, he can pass the user check and then submit any filenam...
CYASK 3.x - neturl Local File Disclosure
CYASK 3.x - neturl Local File Disclosure This vulnerability leads to that the attacker can read any file on your webserver when it installs cyask. The $neturl variable in collect.php is short of enough check. When the attacker registers a new user, he can pass the user check and then submit any...
CYASK 3.x (collect.php neturl) Local File Disclosure Vulnerability
Exploit for unknown platform in category web applications ================================================================== CYASK 3.x collect.php neturl Local File Disclosure Vulnerability ================================================================== This vulnerability leads to that the...