Acme thttpd HTTP Server - Directory Traversal

source: https://www.securityfocus.com/bid/60010/info thttpd is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary local files within the context of the web server. Information...

Foscam < 11.37.2.49 Directory Traversal Vulnerability

Foscam is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

PHPBoost - Arbitrary File Upload / Information Disclosure

source: https://www.securityfocus.com/bid/58432/info PHPBoost is prone to an information disclosure vulnerability and an arbitrary file-upload vulnerability because the application fails to adequately sanitize user-supplied input. An attacker can exploit these issues to upload arbitrary files in...

Foscam < 11.37.2.49 - Directory Traversal

source: https://www.securityfocus.com/bid/58290/info Foscam is prone to a directory-traversal vulnerability. Remote attackers can use specially crafted requests with directory-traversal sequences '../' to retrieve arbitrary files in the context of the application. This may aid in further attacks...

EasyITSP - 'voicemail.php' Directory Traversal

source: https://www.securityfocus.com/bid/57741/info EasyITSP is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. Remote attackers can use specially crafted requests with directory-traversal sequences '../' to access arbitrary files in the...

EasyITSP - voicemail.php Directory Traversal

EasyITSP - voicemail.php Directory Traversal source: https://www.securityfocus.com/bid/57741/info EasyITSP is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. Remote attackers can use specially crafted requests with directory-traversal...

WordPress Plugin Gallery - filename_1 Arbitrary File Access

WordPress Plugin Gallery - filename1 Arbitrary File Access source: https://www.securityfocus.com/bid/57256/info The Gallery plugin for WordPress is prone to an arbitrary file-access vulnerability. Remote attackers can exploit this issue to read arbitrary files. This may lead to further attacks...

TomatoCart - 'json.php' Security Bypass

source: https://www.securityfocus.com/bid/57156/info TomatoCart is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and create files with arbitrary shell script which may aid in further attacks. TomatoCart versions 1.1.5 and 1.1....

ATutor 2.1 - tool_file Local File Inclusion

ATutor 2.1 - toolfile Local File Inclusion source: https://www.securityfocus.com/bid/56600/info ATutor is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts i...

DCForum - 'auth_user_file.txt' File Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/56383/info DCForum is prone to multiple information-disclosure vulnerabilities. Exploiting these issues may allow an attacker to obtain sensitive information that may aid in further attacks. http://www.example.com/cgi-bin/Userinfo/authuserfile.txt...

Axigen Mail Server - Filename Directory Traversal

Axigen Mail Server - Filename Directory Traversal source: https://www.securityfocus.com/bid/56343/info Axigen Mail Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied data. A remote attacker could exploit this vulnerability using...

Axigen Mail Server - 'Filename' Directory Traversal

source: https://www.securityfocus.com/bid/56343/info Axigen Mail Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied data. A remote attacker could exploit this vulnerability using directory-traversal strings such as '../' to obtain...

WebTitan - 'logs-x.php' Directory Traversal

source: https://www.securityfocus.com/bid/55904/info WebTitan is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. A remote attacker could exploit the vulnerability using directory-traversal characters '../' to access arbitrary files...

WordPress 3.4.2 - Multiple Path Disclosure Vulnerabilities

WordPress 3.4.2 - Multiple Path Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/55597/info WordPress is prone to multiple path-disclosure vulnerabilities. Remote attackers can exploit these issues to obtain sensitive information that may lead to further attacks. WordPress 3.4...

MySQLDumper 1.24.4 - Multiple Script Direct Request Information Disclosures

MySQLDumper 1.24.4 - Multiple Script Direct Request Information Disclosures source: https://www.securityfocus.com/bid/53306/info MySQLDumper is prone to multiple security vulnerabilities, including: 1. Multiple cross-site scripting vulnerabilities. 2. A local file-include vulnerability. 3. Multip...

Jetty Web Server - Directory Traversal

source: https://www.securityfocus.com/bid/50723/info Jetty Web Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary files within the context of the webserver. Informatio...

Adobe ColdFusion Multiple Path Disclosure Vulnerabilities

The host is running Adobe ColdFusion and is prone to multiple path disclosure vulnerabilities. OpenVAS Vulnerability Test $Id: secpodadobecoldfusionmultiplepathdiscvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ Adobe ColdFusion Multiple Path Disclosure Vulnerabilities Authors: Sooraj KS Copyright:...

HOMEPIMA Design - filedown.php Local File Disclosure

HOMEPIMA Design - filedown.php Local File Disclosure source: https://www.securityfocus.com/bid/47770/info HOMEPIMA Design is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. Exploiting this vulnerability would allow an attacker to obtain...

SugarCRM 6.1.1 - Information Disclosure

SugarCRM 6.1.1 - Information Disclosure source: https://www.securityfocus.com/bid/46885/info SugarCRM is prone to an information-disclosure vulnerability because it fails to restrict access to certain application data. Attackers can exploit this issue to obtain sensitive information that may lead...

Freefloat FTP Server - Directory Traversal

Freefloat FTP Server - Directory Traversal source: https://www.securityfocus.com/bid/45218/info Freefloat FTP Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to retrieve arbitrary fil...