CVE-2007-6187: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in PHP Content Architect aka NoAh 0.9 pre 1.2 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the filepath parameter to 1 cssfile.php, 2 jsfile.php, or 3 xmlfile.php in noah/modules/nosystem/templates/...

NoAh <= 0.9 pre 1.2 (filepath) Remote File Disclosure Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== NoAh = 0.9 pre 1.2 filepath Remote File Disclosure Vulnerabilities ===================================================================== NoAh = 0.9 pre 1.2 filepath Remo...

NoAh 0.9 pre 1.2 - filepath Remote File Disclosure

NoAh 0.9 pre 1.2 - filepath Remote File Disclosure NoAh = 0.9 pre 1.2 filepath Remote File Disclosure Vulnerabilities Script : http://sourceforge.net/project/showfiles.php?groupid=131995 /noah0.9pre1.2.tar.gz/ Exploits :...

PT-2007-3745 · Unknown · Seir Anphin

Name of the Vulnerable Software and Affected Versions: Seir Anphin affected versions not specified Description: A directory traversal issue in modules/file.php allows remote attackers to obtain sensitive information via a .. dot dot in the afilepath parameter. Note that a third party has disputed...

CVE-2007-2412: Undefined Security Weakness

Directory traversal vulnerability in modules/file.php in Seir Anphin allows remote attackers to obtain sensitive information via a .. dot dot in the afilepath parameter. NOTE: a third party has disputed this issue because the a array is populated by a database query before use...

CVE-2006-4602: Undefined Security Weakness

Unrestricted file upload vulnerability in jhot.php in TikiWiki 1.9.4 Sirius and earlier allows remote attackers to execute arbitrary PHP code via a filepath parameter that contains a filename with a .php extension, which is uploaded to the img/wiki/ directory...

CVE-2006-3934: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in downloadTrigger.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to download arbitrary files via an absolute pathname in the filePath parameter...

CVE-2004-1217

Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter to 1 Statsbrowse.asp or 2 Generalbrowse.asp...

CVE-2004-1217: Undefined Security Weakness

Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter to 1 Statsbrowse.asp or 2 Generalbrowse.asp...

Gzip Memory Bomb Denial Of Service

This module generates and hosts a 10MB single-round gzip file that decompresses to 10GB. Many applications will not implement a length limit check and will eat up all memory and eventually die. This can also be used to kill systems that download/parse content from a user-provided URL...

CVE-2002-0466

Hosting Controller 1.4.1 and earlier allows remote attackers to browse arbitrary directories via a full C: style pathname in the filepath arguments to 1 Statsbrowse.asp, 2 servubrowse.asp, 3 browsedisk.asp, 4 browsewebalizerexe.asp, or 5 sqlbrowse.asp...

CVE-2002-0775: Undefined Security Weakness

browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter...