631 matches found
Adobe SVG Viewer 3.0 - ActiveX Control SRC Information Disclosure
source: https://www.securityfocus.com/bid/13490/info The Adobe SVG Viewer ActiveX control is prone to an information disclosure vulnerability. Reports indicate that the Adobe SVG Viewer ActiveX control may be employed to disclose the existence of a target file. Information that is harvested by...
CVE-2005-0588
Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, which allows remote attackers to determine the existence of files on the local system...
CVE-2005-0733
PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to determine the existence of files via an HTTP request with a full pathname, which produces different messages whether the file exists or not...
CVE-2005-0536
Directory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to delete arbitrary files or determine file existence via a parameter related to image deletion...
Adobe Acrobat Reader ActiveX information leak
It's possible to check file existance with LoadFile method...
CVE-2005-0733
The CVE-2005-0733 entry concerns PY Software Active Webcam WebServer (webcam.exe) 5.5. It enables remote attackers to determine whether a full path exists by issuing HTTP requests, with differing responses based on file existence, resulting in information disclosure. Affected component: Active We...
CVE-2005-0733
PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to determine the existence of files via an HTTP request with a full pathname, which produces different messages whether the file exists or not...
CVE-2005-0536
CVE-2005-0536 originates from a directory traversal flaw in MediaWiki (1.3.x pre-1.3.11 and 1.4 beta pre-1.4 RC1). The issue allows remote attackers to delete arbitrary files or probe file existence via the image deletion parameter. Multiple connected sources corroborate the same vulnerable versi...
CVE-2004-1325
The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote attackers to determine the existence of files on the local system...
CVE-2004-1325
The CVE-2004-1325 entry concerns the ActiveX control used by Windows Media Player 9.0. The getItemInfoByAtom function returns 0 if a target file does not exist, or the file size if it exists, enabling remote attackers to determine whether files exist on the local system. The description focuses o...
CVE-2004-2747
Directory traversal vulnerability in Pablo Software Solutions Quick 'n Easy FTP Server 1.77, and possibly earlier versions, allows remote authenticated users to determine the existence of arbitrary files via a .. dot dot in the DEL command, which triggers different error messages depending on...
CVE-2004-1325
The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote attackers to determine the existence of files on the local system...
ie6-file-detection.txt
Affected Software : Microsoft Internet Explorer Vulnerability : Local File Detection Tested On : MS IE 6.0 SP1, Win2K SP4, up-to-date according to windowsupdate.com Discovered by : Gregory R. Panakkal Overview ======== This security vulnerability in Internet Explorer allows remote attackers to...
Microsoft Internet Explorer sysimage: information leak
By using sysimage: URL it's possible to check local file existance...
msieLocalFile.txt
Microsoft Internet Explorer permits to examine the existence of local files Description: There is a security bug in Microsoft Internet Explorer, which allows to check up existence of local files in system directories Root C:/, WINDOWS, SYSTEM, SYSTEM32, DESKTOP, COMMAND, Internet Explorer...
Microsoft Internet Explorer information leak
It's possible to check file existance in the standard folder...
Microsoft Internet Explorer 6 - Local Resource Enumeration
Microsoft Internet Explorer 6 - Local Resource Enumeration source: https://www.securityfocus.com/bid/11621/info Microsoft Internet Explorer is reported prone to a local resource enumeration vulnerability. It is reported that the vulnerability exists because when handling 'res://' requests for loc...
Microsoft Internet Explorer 6 - Resource Detection
Microsoft Internet Explorer 6 - Resource Detection source: https://www.securityfocus.com/bid/11026/info Microsoft Internet Explorer is prone to a security weakness that may permit an attacker to determine the existence of resources on a vulnerable computer. An attacker can use an IFRAME that is...
CVS history.c File Existence Information Disclosure
The remote CVS server, according to its version number, can be exploited by malicious users to gain knowledge of certain system information. This behavior can be exploited to determine the existence and permissions of arbitrary files and directories on a vulnerable system. C Tenable Network...