CVE-2013-4885: Undefined Security Weakness

The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload "arbitrarily named" files via a crafted FullName parameter in a response, as demonstrated using directory traversal sequences...

PT-2013-5261

Name of the Vulnerable Software and Affected Versions NMap versions prior to 6.40 ALT Linux affected versions not specified Description The issue allows remote servers to upload files with arbitrary names via a crafted FullName parameter in a response. This can be achieved by using directory...

CVE-2008-6831: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Atlassian JIRA Enterprise Edition 3.13 allow remote attackers to inject arbitrary web script or HTML via the 1 fullname Full Name parameter in the ViewProfile page or 2 returnUrl parameter in a form, as demonstrated using...

CVE-2006-0732: Undefined Security Weakness

Directory traversal vulnerability in SAP Business Connector BC 4.6 and 4.7 allows remote attackers to read or delete arbitrary files via the fullName parameter to 1 sapbc/SAP/chopSAPLog.dsp or 2 invoke/sap.monitor.rfcTrace/deleteSingle. Details will be updated after the grace period has ended...