CVE-2005-1303

The citat.pl script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1295

include.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1305

The hyper.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1303: Undefined Security Weakness

The citat.pl script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1295

include.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1298

The inserter.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1303

The citat.pl script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-0864: Undefined Security Weakness

The Boa web server, as used in Samsung ADSL Modem SMDK8947v1.2 and possibly other products, allows remote attackers to read arbitrary files via a full pathname in the HTTP request...

CVE-2005-0733

PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to determine the existence of files via an HTTP request with a full pathname, which produces different messages whether the file exists or not...

CVE-2005-0733: Undefined Security Weakness

PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to determine the existence of files via an HTTP request with a full pathname, which produces different messages whether the file exists or not...

CVE-2002-0463

ARSC (Really Simple Chat) version 1.0.1 and earlier is affected by an information disclosure vulnerability. An invalid arsc_language value allows remote attackers to cause an error message that reveals the full pathname of the web server, exposing partial confidentiality. The CVE entry notes this...

CVE-2002-0169: Undefined Security Weakness

The default stylesheet for DocBook on Red Hat Linux 6.2 through 7.2 is installed with an insecure option enabled, which could allow users to overwrite files outside of the current directory from an untrusted document by using a full pathname as an element identifier...

CVE-2002-0654

Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via 1 a request for a .var file, which leaks the pathname in the resulting error message, or 2 via an error message that occurs when a script child process cannot be invoked...

CVE-2002-1089: Undefined Security Weakness

rwcgi60 CGI program in Oracle Reports Server, by design, provides sensitive information such as the full pathname, which could enable remote attackers to use the information in additional attacks...