10 matches found
CVE-2012-0981: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in phpShowtime 2.0 allows remote attackers to list arbitrary directories and image files via a .. dot dot in the r parameter to index.php. NOTE: Some of these details are obtained from third party information...
CVE-2009-3366: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in navigation.php in An image gallery 1.0 allows remote attackers to list arbitrary directories via a .. dot dot in the path parameter...
CVE-2008-7142: Improper Limitation of a Pathname to a Restricted Directory
Absolute path traversal vulnerability in the Disk Usage module frontend/x/diskusage/index.html in cPanel 11.18.3 allows remote attackers to list arbitrary directories via the showtree parameter...
CVE-2008-0480: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in Web Wiz Forums 9.07 and earlier allow remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\ in the sub parameter to 1 RTEfilebrowser.asp or 2 filebrowser.asp...
CVE-2003-1349: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in NITE ftp-server NiteServer 1.83 allows remote attackers to list arbitrary directories via a ".." backslash dot dot in the CD CWD command...
CVE-2007-1143: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in pn-menu.php in J-Web Pics Navigator 1.0 allows remote attackers to list arbitrary directories via a .. dot dot in the dir parameter...
CVE-2006-6138
Directory traversal vulnerability in download.php in Sisfo Kampus 0.8 allows remote attackers to list arbitrary directories via an absolute pathname in the dir parameter...
CVE-2006-5028: Undefined Security Weakness
Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Microsoft Windows allows remote attackers to list arbitrary directories via a ../ dot dot slash in the file parameter in a chdir action...
CVE-2005-2137: Undefined Security Weakness
Unknown vulnerability in NateOn Messenger 3.0 allows remote attackers to list arbitrary directories via unknown attack vectors...
CVE-2002-0447: Undefined Security Weakness
Directory traversal vulnerability in Xerver Free Web Server 2.10 and earlier allows remote attackers to list arbitrary directories via a .. dot dot in an HTTP GET request...