CVE-2005-1357

The CVE-2005-1357 entry concerns a vulnerability in a text.cgi script that allows remote attackers to read arbitrary files by supplying a full pathname in the argument. The underlying flaw is unrestricted file access via the argument, enabling disclosure of sensitive data from the server. The con...

CVE-2005-1353

The forum.pl script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1350

The ad.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1303

The citat.pl script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1295

include.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1305

The hyper.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1295

include.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1298

The inserter.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1303

The citat.pl script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1238

By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows attackers to read or write arbitrary files, including sensitive QSYS databases, via a full pathname in a GET or PUT request...

CVE-2005-1147

calendar.pl in CalendarScript 3.20 allows remote attackers to obtain sensitive information via invalid 1 calendar or 2 template parameters, which leaks the full pathname and debug information...

CVE-2005-1001

PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to 1 the Surveys module with the file parameter set to comments or 2 3D-Fantasy/theme.php, which leaks the full pathname of the web server in a PHP error message...

CVE-2005-0998

The WebLinks module for PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via an invalid show parameter, which triggers a division by zero PHP error that leaks the full pathname of the server...

CVE-2005-0733

PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to determine the existence of files via an HTTP request with a full pathname, which produces different messages whether the file exists or not...

CVE-2004-1010

Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname...

CVE-2004-1010

Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname...

CVE-2004-1010

Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname...

CVE-2002-0445

The CVE concerns article.php in PHP FirstPost 0.1, where an invalid post number in the post parameter causes an error message that leaks the server’s full pathname. This constitutes an information disclosure vulnerability in the PHP FirstPost 0.1 package. The available records do not provide addi...

CVE-2002-0445

article.php in PHP FirstPost 0.1 allows allows remote attackers to obtain the full pathname of the server via an invalid post number in the post parameter, which leaks the pathname in an error message...

CVE-2004-0235

Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with 1 .. sequences or 2 absolute pathnames with double leading slashes "//absolute/path"...