227 matches found
Pivot 1.40.5 Dreamwind load_template() Credentials Disclosure Exploit
Exploit for unknown platform in category web applications ===================================================================== Pivot 1.40.5 Dreamwind loadtemplate Credentials Disclosure Exploit ===================================================================== ?php / Pivot 1.40.5 'Dreamwind'...
Symantec Backup Exec System Recovery Manager Traversal Arbitrary File Access
The remote host appears to be running Symantec Backup Exec System Recovery Manager, a backup manager solution. The Tomcat servlet 'reportsfile' included in the version of Backup Exec System Recovery Manager installed on the remote host fails to properly sanitize user input to the 'filename'...
SuSE 10 Security Update : tomcat5 (ZYPP Patch Number 2987)
Certain characters of the URL were not properly filtered. This allowed directory reverse traversal attacks to access the web-root of tomcat. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...
HFS HTTP File Server任意文件上传漏洞
HTTP File Server是一款基于HTTP的文件服务程序。 HTTP File Server不正确过滤用户提交的文件数据，远程攻击者可以利用漏洞进行目录遍历攻击，上传文件到任意目标文件夹。 使用'../'形式的文件名形式，可绕过目录限制，上传文件到任意系统位置。 HTTP File Server HTTP File Server 2.2a HTTP File Server HTTP File Server 2.2 升级程序： HTTP File Server HTTP File Server 2.2a HTTP File Server HTTP File Server 2.2b...
CVE-2007-5685
The safepath function in shttp before 0.0.5 allows remote attackers to conduct directory traversal attacks and read files via a combination of ".." and sub-directory specifiers that resolve to a pathname that is at or below the same level as the web document root, but in a different part of the...
EUVD-2007-0583
include/debug.php in Webfwlog 0.92 and earlier, when registerglobals is enabled, allows remote attackers to obtain source code of files via the conffile parameter. NOTE: some of these details are obtained from third party information. It is likely that this issue can be exploited to conduct...
4Images <= 1.7.1 index.php template Parameter Traversal Local File Inclusion
4Images is installed on the remote system. It is an image gallery management system. The installed application does not validate user-input passed in the 'template' variable of the 'index.php' file. This allows an attacker to execute directory traversal attacks and display the content of sensitiv...
[SA18480] E-Post Mail Server Products Multiple Vulnerabilities
TITLE: E-Post Mail Server Products Multiple Vulnerabilities SECUNIA ADVISORY ID: SA18480 VERIFY ADVISORY: http://secunia.com/advisories/18480/ CRITICAL: Highly critical IMPACT: Security Bypass, Exposure of system information, DoS, System access WHERE: From remote SOFTWARE: E-Post Mail Server 4.x...
IRM 012: Portfolio Netpublish Server 7 is vulnerable to a Directory Traversal Attack
---------------------------------------------------------------------- IRM Security Advisory No. 012 Portfolio Netpublish Server 7 is vulnerable to a Directory Traversal Attack Vulnerablity Type / Importance: Information Leakage / High Problem discovered: October 11th 2005 Vendor contacted: Octob...
Pages Pro CD directory traversal
A security vulnerability in the SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Reference...
w-Agora index.php site Parameter Traversal Arbitrary File Access
The remote host is running w-agora, a web-based forum application written in PHP. The remote version of this software is prone to directory traversal attacks. A remote attacker could request a specially crafted URL to read arbitrary files on the remote system with the privileges of the web server...
HolaCMS 1.2.x/1.4.x Voting Module - Directory Traversal Remote File Corruption
source: https://www.securityfocus.com/bid/12799/info HolaCMS is prone to a vulnerability that may allow remote users to corrupt files on the server. This issue is similar to the vulnerability described in BID 12789 HolaCMS Voting Module Remote File Corruption Vulnerability. It is reported that...
[ GLSA 200502-27 ] gFTP: Directory traversal vulnerability
Gentoo Linux Security Advisory GLSA 200502-27 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
CVE-2004-1354
The Solaris Management Console SMC in Sun Solaris 8 and 9 generates different 404 error messages when a file does not exist versus when a file exists but is otherwise inaccessible, which could allow remote attackers to obtain sensitive information in conjunction with a directory traversal .. atta...
LSS-2005-01-03.txt
LSS Security Advisory LSS-2005-01-03 http://security.lss.hr --- Title : Squirrelmail vacation v0.15 local root exploit Advisory ID : LSS-2005-01-03 Date : 10.01.2005. Advisory URL: : http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-03 Impact : Privilege escalation and arbitrary fil...
KorWeblog 1.6.2 - Remote Directory Listing
KorWeblog 1.6.2 - Remote Directory Listing source: https://www.securityfocus.com/bid/11744/info A vulnerability is reported in the KorWeblog software that may allow a remote user to disclose directory listings. The problem presents itself when a malicious user crafts an URI request containing...
CVE-2004-0792
Directory traversal vulnerability in the sanitizepath function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files...
SLX Server 6.1 Arbitrary File Creation Exploit (PoC)
No description provided by source. !/usr/bin/perl Proof of concept exploit: Arbitrary file creation for SLX server 6.1 Written by Carl Livitt, Agenda Security Services, June 2004. This exploit abuses the ProcessQueueFile command on SLX 6.1 others? servers to create arbitrary files on the filesyst...
CVE-2000-0773
Summary: Bajie HTTP web server 0.30a contains a path traversal vulnerability that allows a remote attacker to read arbitrary files by using a URL containing a dot-dot sequence ("...."). The root cause is insufficient validation of path components in the HTTP request, resulting in potential partia...