6517 matches found
contentServ.txt
---------------------------------------------------------------------- -- ContentServ still features remote reading of arbitrary files -- ------------------------- [email protected] ------------------------ / Boring PHP bug warning: """""""""""""""""""""""""""""" By reading boring PHP bug...
CVE-2005-2792
Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. dot dot in the customwelcomepage parameter...
PHPMyFAQ 1.5.1 - Local File Inclusion
PHPMyFAQ 1.5.1 - Local File Inclusion source: https://www.securityfocus.com/bid/14929/info PHPMyFAQ is prone to a local file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...
CVE-2005-2613
Unknown vulnerability in CPAINT Ajax Toolkit before 1.3-SP allows attackers to execute arbitrary PHP or ASP code or read files via unknown vectors...
CVE-2004-2336: Undefined Security Weakness
Unknown vulnerability in Novell GroupWise and GroupWise WebAccess 6.0 through 6.5, when running with Apache Web Server 1.3 for NetWare where Apache is loaded using GWAPACHE.CONF, allows remote attackers to read directories and files on the server...
CVE-2001-1580
CVE-2001-1580 : A directory traversal vulnerability exists in ScriptEase viewcode.jse for NetWare 5.1 before 5.1 SP3, enabling remote attackers to read arbitrary files via ".." sequences in the query string. The vulnerability stems from insufficient input sanitization in the NetWare Web Server’s ...
Debian DSA-756-1 : squirrelmail - several vulnerabilities
Several vulnerabilities have been discovered in Squirrelmail, a commonly used webmail system. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-1769 Martijn Brinkers discovered cross-site scripting vulnerabilities that allow remote attackers to inject...
Slackware 9.0 / current : GDM security update (SSA:2003-236-01)
Upgraded gdm packages are available for Slackware 9.0 and -current. These fix a security issue where a local user may use GDM to read any file on the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware...
Weak SSH Tectia Server key permission
Server's private key is open for reading...
CVE-2002-1913
CVE-2002-1913 affects myPHPNuke 1.8.8 where the PHP file phptonuke.php (filnavn parameter) allows a remote attacker to read arbitrary files via a full pathname. This is a Directory Traversal issue; exploitation requires no authentication and can be triggered by supplying a full file path in filna...
CVE-2002-1880
LokwaBB 1.2.2 allows remote attackers to read arbitrary messages by modifying the pmid parameter to pm.php...
CVE-2005-2050
Unknown vulnerability in Tor before 0.1.0.10 allows remote attackers to read arbitrary memory and possibly key information from the exit server's process space...
CVE-2005-2050
Unknown vulnerability in Tor before 0.1.0.10 allows remote attackers to read arbitrary memory and possibly key information from the exit server's process space...
Vulnerability: McGallery v 1.1 files reading on disk
Vendor: Phpforum, http://www.phpforums.net/ Product: McGallery v 1.1 Vulnerability: files reading on disk Consequences: Web server paths are opened Risk: High Description: Attacker can form the query in URL form ang get the access to the system files Example:...
CVE-2005-1889
Unknown vulnerability in Sun ONE Application Server 6.5 SP1 Maintenance Update 6 and earlier allows attackers to read files...
CVE-2005-1889
Unknown vulnerability in Sun ONE Application Server 6.5 SP1 Maintenance Update 6 and earlier allows attackers to read files...
CVE-2005-1798
CVE-2005-1798 affects ServersCheck Monitoring Software versions 5.9.0–5.10.0. The vulnerability is a directory traversal that allows a remote attacker to read arbitrary files via dot-dot sequences in an HTTP request. According to the NVD entry, the impact is partial confidentiality with no integr...
CVE-2004-2051
The CVE-2004-2051 entry affects eSeSIX Thintune thin clients (Phoenix browser) running firmware 2.4.38 and earlier. The issue allows local users to read arbitrary files via a file:/// URL, as described in the CVE description. Related OpenVAS data also references multiple vulnerabilities in Thintu...
CVE-2004-1986
Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to read arbitrary files via a .. dot dot in the startdir parameter...