CVE-2000-0842

The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0853

YaBB Bulletin Board 9.1.2000 allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0687

Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack in the catdir parameter...

CVE-2000-0686

Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack in the fromfile parameter...

CVE-2000-0872

explorer.php in PhotoAlbum 0.9.9 allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0842

CVE-2000-0842 affects the UnixWare 7 scohelphttp webserver. The vulnerability is in the search97cgi/vtopic component, where a path traversal via a .. (dot dot) attack could allow remote attackers to read arbitrary files. The available connected sources (NVD, CVE listings) confirm the affected pro...

CVE-2000-0842

The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0872

CVE-2000-0872 affects PhotoAlbum 0.9.9. The vulnerability is a path traversal in explorer.php that allows remote attackers to read arbitrary files via a .. (dot dot) sequence. This is a direct file-disclosure issue, enabling access to non-public data on the server where PhotoAlbum is hosted. The ...

CVE-1999-0927

NTMail is affected by CVE-1999-0927; remote attackers can read arbitrary files via a directory traversal (..). The provided documents do not include remediation or version-specific details.

CVE-2000-0674

CVE-2000-0674 affects the ftp.pl CGI in Virtual Visions' FTP server, allowing remote attackers to read directories outside the document root via a ../ traversal. The vulnerable component is the CGI script handling FTP directory listings (ftp.pl). Impact is information disclosure (directory listin...

CVE-2000-0443

The CVE-2000-0443 entry concerns the HP Web JetAdmin 5.6 web interface server, which is vulnerable to a directory traversal (.. attack) allowing remote attackers to read arbitrary files. The core issue is a failure to sanitize path inputs in the web interface, enabling access to files outside the...

CVE-2000-0240

CVE-2000-0240 affects vqSoft vqServer. Multiple sources (NVD, CVE list, OPENVAS/Nessus, PT-2000-1222) describe a directory traversal style flaw where an attacker can read arbitrary files by using a URL containing a "/........../" segment, a variation of a ". ." (dot-dot) path traversal. Affected ...

CVE-2000-0660

CVE-2000-0660 affects the WDaemon web server for WorldClient 2.1, allowing remote attackers to read arbitrary files through a directory-traversal (..). The underlying issue is improper handling of path components, enabling unauthorized file access. Exploitation details are not provided in the CVE...

CVE-2000-0782

CVE-2000-0782 affects Netwin Netauth (netauth.cgi) up to version 4.2e and earlier. The vulnerability allows remote attackers to read arbitrary files via a directory traversal (.. ) attack, exposing file contents with the web server’s privileges. The issue is triggered by improper handling of file...

CVE-2000-0191

Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. dot dot attack...

CVE-2000-0191

The CVE-2000-0191 issue affects Axis StorPoint CD. A directory traversal vulnerability allows remote attackers to reach administrator URLs without authentication by exploiting a .. sequence, enabling an authentication bypass. The Nessus entry references a specific crafted URL path (e.g., /cd/../c...

CVE-2000-0634

The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0282

TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. dot dot attack on the webplus CGI program...

CVE-2000-0780

The web server in IPSWITCH IMail 6.04 and earlier allows remote attackers to read and delete arbitrary files via a .. dot dot attack...

CVE-2000-0443

The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. dot dot attack...