CVE-2005-2792

Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. dot dot in the customwelcomepage parameter...

PHPMyFAQ 1.5.1 - Local File Inclusion

PHPMyFAQ 1.5.1 - Local File Inclusion source: https://www.securityfocus.com/bid/14929/info PHPMyFAQ is prone to a local file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

CVE-2005-2613

Unknown vulnerability in CPAINT Ajax Toolkit before 1.3-SP allows attackers to execute arbitrary PHP or ASP code or read files via unknown vectors...

CVE-2001-1580

CVE-2001-1580 : A directory traversal vulnerability exists in ScriptEase viewcode.jse for NetWare 5.1 before 5.1 SP3, enabling remote attackers to read arbitrary files via ".." sequences in the query string. The vulnerability stems from insufficient input sanitization in the NetWare Web Server’s ...

Debian DSA-756-1 : squirrelmail - several vulnerabilities

Several vulnerabilities have been discovered in Squirrelmail, a commonly used webmail system. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-1769 Martijn Brinkers discovered cross-site scripting vulnerabilities that allow remote attackers to inject...

Slackware 9.0 / current : GDM security update (SSA:2003-236-01)

Upgraded gdm packages are available for Slackware 9.0 and -current. These fix a security issue where a local user may use GDM to read any file on the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware...

Weak SSH Tectia Server key permission

Server's private key is open for reading...

CVE-2002-1880

LokwaBB 1.2.2 allows remote attackers to read arbitrary messages by modifying the pmid parameter to pm.php...

CVE-2005-2050

Unknown vulnerability in Tor before 0.1.0.10 allows remote attackers to read arbitrary memory and possibly key information from the exit server's process space...

CVE-2002-1913

CVE-2002-1913 affects myPHPNuke 1.8.8 where the PHP file phptonuke.php (filnavn parameter) allows a remote attacker to read arbitrary files via a full pathname. This is a Directory Traversal issue; exploitation requires no authentication and can be triggered by supplying a full file path in filna...

CVE-2005-2050

Unknown vulnerability in Tor before 0.1.0.10 allows remote attackers to read arbitrary memory and possibly key information from the exit server's process space...

Vulnerability: McGallery v 1.1 files reading on disk

Vendor: Phpforum, http://www.phpforums.net/ Product: McGallery v 1.1 Vulnerability: files reading on disk Consequences: Web server paths are opened Risk: High Description: Attacker can form the query in URL form ang get the access to the system files Example:...

CVE-2005-1889

Unknown vulnerability in Sun ONE Application Server 6.5 SP1 Maintenance Update 6 and earlier allows attackers to read files...

CVE-2005-1889

Unknown vulnerability in Sun ONE Application Server 6.5 SP1 Maintenance Update 6 and earlier allows attackers to read files...

CVE-2005-1798

CVE-2005-1798 affects ServersCheck Monitoring Software versions 5.9.0–5.10.0. The vulnerability is a directory traversal that allows a remote attacker to read arbitrary files via dot-dot sequences in an HTTP request. According to the NVD entry, the impact is partial confidentiality with no integr...

CVE-2003-1162

index.php in Tritanium Bulletin Board 1.2.3 allows remote attackers to read and reply to arbitrary messages by modifying the threadid, forumid, and sid parameters...

CVE-2004-1986

Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to read arbitrary files via a .. dot dot in the startdir parameter...

CVE-2004-2051

The CVE-2004-2051 entry affects eSeSIX Thintune thin clients (Phoenix browser) running firmware 2.4.38 and earlier. The issue allows local users to read arbitrary files via a file:/// URL, as described in the CVE description. Related OpenVAS data also references multiple vulnerabilities in Thintu...

Easy Message Board - Directory Traversal

Easy Message Board - Directory Traversal source: https://www.securityfocus.com/bid/13551/info Easy Message Board is prone to a directory traversal vulnerability that could allow attackers to read files outside the Web root...

Easy Message Board - Directory Traversal

source: https://www.securityfocus.com/bid/13551/info Easy Message Board is prone to a directory traversal vulnerability that could allow attackers to read files outside the Web root. http://www.example/com/cgi-bin/emsgb/easymsgb.pl?print=../../../../../../../../etc/passwd...