276 matches found
CVE-2003-0599
Unknown vulnerability in the Virtual File System VFS capability for phpGroupWare 0.9.16preRC and versions before 0.9.14.004 with unknown implications, related to the VFS path being under the web document root...
CVE-2002-1454
MyWebServer 1.0.2 allows remote attackers to determine the absolute path of the web document root via a request for a directory that does not exist, which leaks the pathname in an error message...
CVE-2002-2342
Bannermatic 1, 2, and 3 stores the 1 ban.log, 2 ban.bak, 3 ban.dat and 4 banmat.pwd data files under the web document root with insufficient access control, which allows attackers to obtain sensitive information via a direct request for the files...
CVE-2002-0917
CVE-2002-0917 affects CGIScript.net csPassword.cgi, which stores .htpasswd files under the web document root. This allows remote authenticated users to download the password file and crack other users’ passwords. The vulnerability is mapped to a high severity (CVSS v2 base score 7.5, vector AV:N/...
CVE-2001-0892
Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root such as .htpasswd via a GET request with a trailing /...
CVE-2001-0893
Acme minihttpd before 1.16 allows remote attackers to view sensitive files under the document root such as .htpasswd via a GET request with a trailing /...
Yet Another IBM WebSphere Showcode Vulerability
Summary: When IBM WebSphere application server shares the same document root as Netscape Enterprise server it is possible for a malicious user to view to view the source of any JSP file in the document root. WebSphere's plugin for Netscape Enterprise server uses the host header sent from the clie...
CVE-2000-1070
pollit.cgi in Poll It 2.01 and earlier uses data files that are located under the web document root, which allows remote attackers to access sensitive or private information...
CVE-2000-1070
Poll It 2.01 and earlier are affected by CVE-2000-1070 due to pollit.cgi using data files located under the web document root. This configuration permits remote attackers to access sensitive or private information. The provided documents do not specify affected versions beyond 2.01 and earlier, n...
Allaire JRUN 2.3 Remote command execution
Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory Allaire JRUN 2.3 ---------------------------------------------------------------------- FS Advisory ID: FS-102300-14-JRUN Release Date: October 23, 2000 Product: Allaire JRUN 2.3 Vendor: Allaire Inc...
CVE-2000-0674
ftp.pl CGI program for Virtual Visions FTP browser allows remote attackers to read directories outside of the document root via a .. dot dot attack...
CVE-2000-0774
The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root...
MultiHTML.txt
Title : MultiHTML vulnerability. Description : Retrieve files from the server. Vendor status : Notified and a new not much improved script is released. Short description of the tool: ============================== MultiHTML allows you to put an SSI call where you want the HTML file to be displaye...
CVE-2000-0674
ftp.pl CGI program for Virtual Visions FTP browser allows remote attackers to read directories outside of the document root via a .. dot dot attack...