644 matches found
CVE-2000-0282
TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. dot dot attack on the webplus CGI program...
CVE-1999-0695
The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. dot dot attack...
CVE-2000-0188
EZShopper 3.0’s search.cgi is vulnerable to directory traversal and command injection. Remote attackers can read arbitrary files via a .. path and may execute shell commands through metacharacters. The Nessus entry also mentions directory traversal in loadpage.cgi and possible arbitrary command e...
PT-2000-1222 · Vqsoft · Vqserver
Name of the Vulnerable Software and Affected Versions: vqSoft vqServer affected versions not specified Description: The issue allows remote attackers to read arbitrary files via a "/........../" in the URL, which is a variation of a ".." dot dot attack. Recommendations: At the moment, there is no...
CVE-2000-0180
Sojourn search engine allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2000-0187
EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. dot dot attack or execute commands via shell metacharacters...
CVE-2000-0153
The CVE-2000-0153 entry concerns FrontPage Personal Web Server (PWS). It describes a path traversal vulnerability (dot-dot attack) that allows remote attackers to read files, resulting in partial confidentiality impact. The available connected records confirm the affected product and the basic im...
CVE-2000-0126
Sample Internet Data Query IDQ scripts in IIS 3 and 4 allow remote attackers to read files via a .. dot dot attack...
CVE-2000-0144
Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. dot dot attack...
CVE-2000-0054
search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a .. dot dot attack...
CVE-1999-0776
The CVE-1999-0776 entry concerns the Alibaba HTTP server and a directory-traversal vulnerability that allows remote attackers to read files via a .. (dot dot) path. Affected software is Alibaba HTTP server; vulnerability type is directory traversal/ improper input handling leading to partial conf...
CVE-2000-0054
The CVE-2000-0054 entry describes a directory traversal vulnerability in the CGI script search.cgi of the SolutionScripts Home Free package. An unauthenticated remote attacker can use .. sequences in the letter parameter to read arbitrary files from the affected web server, subject to the server ...
CVE-1999-0298
ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. dot dot attack...
CVE-1999-0495
CVE-1999-0495 describes a remote path traversal vulnerability where an attacker can access a file system by using .. (dot dot) when interacting with SMB shares. The underlying cause is directory traversal over SMB, enabling disclosure or modification of sensitive data with complete impact on conf...
CVE-2000-0469
Selena Sol WebBanner 4.0 allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2000-0126
Sample Internet Data Query IDQ scripts in IIS 3 and 4 allow remote attackers to read files via a .. dot dot attack...
PT-2000-1112 · Microsoft · Iis
Name of the Vulnerable Software and Affected Versions: IIS versions 3 and 4 Description: The issue allows remote attackers to read files via a .. dot dot attack, potentially exposing sensitive information. This is made possible by sample Internet Data Query IDQ scripts in the affected IIS version...
CVE-1999-0881
Falcon web server allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-1999-0933
TeamTrack web server allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-1999-0887
The vulnerability CVE-1999-0887 affects the FTGate web interface server, where a remote attacker can read files via a directory traversal using "..". This is confirmed across multiple connected sources (Red Hat, CVE lists, NVD/NVD-derived entries). The underlying cause is a potential improper pat...