1315 matches found
CVE-2005-1420
Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to determine the full pathname of the server via a request for an invalid page, as demonstrated using "%20" hex-encoded space...
CVE-2005-1420
CVE-2005-1420 affects Raysoft/Raybase Video Cam Server 1.0.0 beta. The vulnerability is an information disclosure where remote attackers can determine the full server pathname by requesting an invalid page using a hex-encoded space ("%20"). The provided documents do not specify exploit details be...
CVE-2005-0733
PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to determine the existence of files via an HTTP request with a full pathname, which produces different messages whether the file exists or not...
CVE-2005-0864
The Boa web server, as used in Samsung ADSL Modem SMDK8947v1.2 and possibly other products, allows remote attackers to read arbitrary files via a full pathname in the HTTP request...
CVE-2005-0998
The WebLinks module for PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via an invalid show parameter, which triggers a division by zero PHP error that leaks the full pathname of the server...
CVE-2005-1286
Unquoted Windows search path vulnerability in BitDefender 8 allows local users to prevent BitDefender from starting by creating a malicious C:\program.exe, possibly due to the lack of quoting of the full pathname when executing a process...
CVE-2005-1353
The forum.pl script allows remote attackers to read arbitrary files via a full pathname in the argument...
CVE-2005-1148
calendar.pl in CalendarScript 3.21 allows remote attackers to obtain sensitive information via invalid 1 year or 2 month parameters, which leaks the full pathname and debug information...
CVE-2005-1305
The hyper.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...
CVE-2005-1355
includer.cgi in The Includer allows remote attackers to read arbitrary files via a full pathname in the argument, a similar vulnerability to CVE-2005-0801...
CVE-2005-1357
text.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...
CVE-2005-1001
PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to 1 the Surveys module with the file parameter set to comments or 2 3D-Fantasy/theme.php, which leaks the full pathname of the web server in a PHP error message...
CVE-2005-1355
CVE-2005-1355 affects includer.cgi in The Includer and enables remote attackers to read arbitrary files by supplying a full pathname in the argument (a directory traversal issue). The connected record for CVE-2005-0801 confirms the pattern: directory traversal via .. or a full pathname in the URL...
CVE-2005-1357
text.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...
CVE-2005-1357
The CVE-2005-1357 entry concerns a vulnerability in a text.cgi script that allows remote attackers to read arbitrary files by supplying a full pathname in the argument. The underlying flaw is unrestricted file access via the argument, enabling disclosure of sensitive data from the server. The con...
CVE-2005-1350
The ad.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...
CVE-2005-1353
The forum.pl script allows remote attackers to read arbitrary files via a full pathname in the argument...
CVE-2005-1303
The citat.pl script allows remote attackers to read arbitrary files via a full pathname in the argument...