Resin Traversal Arbitrary File Access

It is possible to read arbitrary files on the remote server by prepending /../../ to the file name. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10656; scriptversion"1.26"; scriptcvsdate"Date: 2018/07/27 18:38:15"; scriptcveid"CVE-2001-0304"; scriptbugtraqid2384;...

WhitSoft SlimServe HTTPd 1.0/1.1 - Directory Traversal

source: https://www.securityfocus.com/bid/14132/info SlimServe HTTP server is prone to directory traversal attacks due to improper sanitization of user input. This type of attack allows a malicious user to read files that exist outside of the Web server root directory...

extent technologies rbs isp 2.5 - Directory Traversal

source: https://www.securityfocus.com/bid/1704/info A remote user is capable of gaining read access to any file residing in the same directory of a host running Extent RBS ISP through directory traversal. Appending '../' to the 'image' variable request on port 8002 will enable a user to read any...

ultrascripts ultraboard 1.6 - Directory Traversal

ultrascripts ultraboard 1.6 - Directory Traversal source: https://www.securityfocus.com/bid/1164/info UltraBoard 1.6 and possibly all 1.x versions is vulnerable to a directory traversal attack that will allow any remote browser to download any file that the webserver has read access to. On Window...

T. Hauck Jana Server 1.0/1.45/1.46 - Directory Traversal

source: https://www.securityfocus.com/bid/699/info The Jana webserver is susceptible to directory traversal attacks using multiple dots in the URL. If the request is made in specific formats, the server will send out files outside of the intended webroot. http ://target/./.././.././.././win.ini o...

CVE-1999-0933

TeamTrack web server allows remote attackers to read arbitrary files via a .. dot dot attack...

Miva htmlscript 2.x - Directory Traversal

source: https://www.securityfocus.com/bid/2001/info Miva's htmlscript CGI program provides a unique scripting language with HTML type tags. Note that htmlscript is an older product no longer distributed by Miva under that name. Versions of the htmlscript interpreter a CGI script prior to 2.9932 a...