Path traversal

Absolute path traversal vulnerability in ZeusCMS 0.3 and earlier might allow remote attackers to list arbitrary directories via a full pathname in the dir parameter...

CVE-2007-4252

Absolute path traversal vulnerability in a certain ActiveX control in CkString.dll 1.1 and earlier in CHILKAT ASP String allows remote attackers to create or overwrite arbitrary files via a full pathname in the first argument to the SaveToFile method, a different vulnerability than CVE-2007-3633...

Path traversal

Absolute path traversal vulnerability in index.php in Webspell 4.01.02 allows remote attackers to include and execute arbitrary local files via a full pathname in the site parameter. NOTE: some of these details are obtained from third party information...

CVE-2005-3431

CVE-2005-3431 describes an absolute path traversal vulnerability in Rockliffe MailSite Express prior to 6.1.22. The issue allows remote attackers to read arbitrary files by supplying a full pathname in the AttachPath field of a mail message under composition. The provided sources confirm the affe...

CVE-2005-2677: Undefined Security Weakness

ACNews stores the database in a file under the web document root with a db.inc extension and insufficient access control, which allows remote attackers to obtain sensitive information such as the full pathname of the server...

DEBIAN-CVE-2005-2147

Trac before 0.8.4 allows remote attackers to read or upload arbitrary files via a full pathname in the id parameter to the 1 upload or 2 attachment viewer scripts...

CVE-2002-1913

phptonuke.php in myPHPNuke 1.8.8 allows remote attackers to read arbitrary files via a full pathname in the filnavn variable...

CVE-2005-1420

Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to determine the full pathname of the server via a request for an invalid page, as demonstrated using "%20" hex-encoded space...

CVE-2005-0998

The WebLinks module for PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via an invalid show parameter, which triggers a division by zero PHP error that leaks the full pathname of the server...

CVE-2005-0733

PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to determine the existence of files via an HTTP request with a full pathname, which produces different messages whether the file exists or not...

CVE-2005-0864

The Boa web server, as used in Samsung ADSL Modem SMDK8947v1.2 and possibly other products, allows remote attackers to read arbitrary files via a full pathname in the HTTP request...

CVE-2005-1305

The hyper.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1355

includer.cgi in The Includer allows remote attackers to read arbitrary files via a full pathname in the argument, a similar vulnerability to CVE-2005-0801...

CVE-2005-1357

text.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1355

CVE-2005-1355 affects includer.cgi in The Includer and enables remote attackers to read arbitrary files by supplying a full pathname in the argument (a directory traversal issue). The connected record for CVE-2005-0801 confirms the pattern: directory traversal via .. or a full pathname in the URL...

CVE-2005-1357

text.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1353

The forum.pl script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1350

The ad.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1353: Undefined Security Weakness

The forum.pl script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1355: Undefined Security Weakness

includer.cgi in The Includer allows remote attackers to read arbitrary files via a full pathname in the argument, a similar vulnerability to CVE-2005-0801...