Дырки в CGI Iconboard

Обратный путь в директориях в сочетании с ошибкой NULL-byte позволяет получить содержимое любого файла...

CVE-2000-0913

modrewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name contains a regular expression...

iPlanet Certificate Management System 4.2 - Directory Traversal

source: https://www.securityfocus.com/bid/1839/info Acquiring access to known files outside of the web root is possible through directory traversal techniques in both iPlanet Certificate Management System CMS. This is made possible through the use of "../" in a HTTP request. The following service...

Microsoft Virtual Machine - Arbitrary Java Codebase Execution

source: https://www.securityfocus.com/bid/1812/info An attacker may gain read access on remote systems by specifying a custom codebase in a Java applet, and delivering to the victims via HTML email or a website. Any arbitrary codebase can be referenced by a java applet that was loaded by an tag i...

YaBB 9.1.2000 - Arbitrary File Read

YaBB 9.1.2000 - Arbitrary File Read source: https://www.securityfocus.com/bid/1668/info YaBB.pl, a web-based bulletin board script, stores board postings in numbered text files. The numbered file name is specified in the call to YaBB.pl in the variable num=. Before retrieving the file, YaBB will...

Fun with UltraBoard V1.6X

hola friends, found some interesting things in the "old" UltraBoard-Forum scripts UltraBoard V 1.6 class:Input Validation Error remote:Yes vulnerable:UltraBoard V1. vendor: www.ultrascripts.com || www.ub2k.com Description: By using the good old NullByte000 its possible to open "any" file on the...

Microsoft Internet Explorer 5 (Windows 95982000NT 4.0) - XML HTTP Redirect

Microsoft Internet Explorer 5 Windows 95982000NT 4.0 - XML HTTP Redirect MS IE 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4 XML HTTP Redirect Vulnerability source: https://www.securityfocus.com/bid/815/info A vulnerability in the method IE5 uses to process XML data may allow a maliciou...

allaire.getfile.cfm.txt

Date: Thu, 11 Feb 1999 11:36:57 -0500 From: Cameron Childress To: [email protected] Subject: ACFUG List: Alert: Allaire Forums GetFile bug The problem outlined below seems to effect all Allaire Forums 2.0.x versions. Allaire has confirmed that the bug exists, and will be issuing a...

Gordano NTMail 4.2 - Web File Access

Gordano NTMail 4.2 - Web File Access source: https://www.securityfocus.com/bid/279/info A vulnerability in Gordano's NTMail allows remote malicious users to steal local files. Gordano's NTMail is a Windows NT mail server program. One of its features is allowing administrators to configure the...

PHPFI 1.0FI 2.0FI 2.0 b10 - mylogmlog

PHPFI 1.0FI 2.0FI 2.0 b10 - mylogmlog source: https://www.securityfocus.com/bid/713/info The PHP/FI package which was originally written by Rasmus Lerdorf is an is an HTML-embedded scripting language. Much of its syntax is borrowed from C, Java and Perl with a couple of unique PHP-specific featur...