CVE-2009-4896

Multiple directory traversal vulnerabilities in the mlmmj-php-admin web interface for Mailing List Managing Made Joyful mlmmj 1.2.15 through 1.2.17 allow remote authenticated users to overwrite, create, or delete arbitrary files, or determine the existence of arbitrary directories, via a .. dot d...

CVE-2008-1286

CVE-2008-1286 affects Sun Java Web Console 3.0.2/3.0.3/3.0.4, where remote attackers may bypass access restrictions and determine the existence of files/directories via unknown vectors, compromising confidentiality. Patches referenced in connected advisories include Solaris 8/9/10 updates (e.g., ...

CVE-2006-5725

The CVE-2006-5725 entry affects the SSL server in AEP Smartgate 4.3b, where remote attackers can determine the existence of directories by requesting a directory URI and receiving different HTTP status codes for existing vs non-existing directories. This describes an information-disclosure flaw i...

CVE-2002-1837

The CVE-2002-1837 vulnerability affects Image Display System (IDS) 0.81 and is triggered by getAlbumToDisplay in idsShared.pm, where using .. in the album parameter enables remote attackers to verify the existence of arbitrary directories, evidenced by different error messages depending on whethe...

Image Display System 0.8.1 - Directory Existence Disclosure

source: https://www.securityfocus.com/bid/4870/info IDS Image Display System is an web based photo album application written in Perl. IDS is freely available and is maintained by Ashley M. Kirchner. Users can confirm the existence and location of various directories residing on the IDS host. This...

Image Display System 0.8.1 - Directory Existence Disclosure

Image Display System 0.8.1 - Directory Existence Disclosure source: https://www.securityfocus.com/bid/4870/info IDS Image Display System is an web based photo album application written in Perl. IDS is freely available and is maintained by Ashley M. Kirchner. Users can confirm the existence and...