CVE-2005-1355

includer.cgi in The Includer allows remote attackers to read arbitrary files via a full pathname in the argument, a similar vulnerability to CVE-2005-0801...

CVE-2005-1357

text.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1355

CVE-2005-1355 affects includer.cgi in The Includer and enables remote attackers to read arbitrary files by supplying a full pathname in the argument (a directory traversal issue). The connected record for CVE-2005-0801 confirms the pattern: directory traversal via .. or a full pathname in the URL...

CVE-2005-1357

The CVE-2005-1357 entry concerns a vulnerability in a text.cgi script that allows remote attackers to read arbitrary files by supplying a full pathname in the argument. The underlying flaw is unrestricted file access via the argument, enabling disclosure of sensitive data from the server. The con...

CVE-2005-1353

The forum.pl script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1350

The ad.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1353: Undefined Security Weakness

The forum.pl script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1355: Undefined Security Weakness

includer.cgi in The Includer allows remote attackers to read arbitrary files via a full pathname in the argument, a similar vulnerability to CVE-2005-0801...

CVE-2005-1303

The citat.pl script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1295

include.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1305

The hyper.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1303: Undefined Security Weakness

The citat.pl script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1295

include.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1298

The inserter.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1303

The citat.pl script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1238

By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows attackers to read or write arbitrary files, including sensitive QSYS databases, via a full pathname in a GET or PUT request...

CVE-2005-1147

calendar.pl in CalendarScript 3.20 allows remote attackers to obtain sensitive information via invalid 1 calendar or 2 template parameters, which leaks the full pathname and debug information...

CVE-2005-1147: Undefined Security Weakness

calendar.pl in CalendarScript 3.20 allows remote attackers to obtain sensitive information via invalid 1 calendar or 2 template parameters, which leaks the full pathname and debug information...

CVE-2005-0998

The WebLinks module for PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via an invalid show parameter, which triggers a division by zero PHP error that leaks the full pathname of the server...

CVE-2005-1001

PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to 1 the Surveys module with the file parameter set to comments or 2 3D-Fantasy/theme.php, which leaks the full pathname of the web server in a PHP error message...