177 matches found
IBM Tivoli Directory Server 3.2.2/4.1 - LDACGI Directory Traversal
source: https://www.securityfocus.com/bid/10841/info IBM Tivoli Directory Server is reported to contain a directory traversal vulnerability in its web front-end application. This issue presents itself due to insufficient sanitization of user-supplied data. This issue allows remote attackers to vi...
CVE-2004-1974
paFileDB 3.1 allows remote attackers to gain sensitive information via a direct request to 1 login.php, 2 category.php, 3 search.php, 4 main.php, 5 viewall.php, 6 download.php, 7 email.php, 8 file.php, 9 rate.php, or 10 stats.php, which reveals the path in an error message...
xweb 1.0 - Directory Traversal
xweb 1.0 - Directory Traversal source: https://www.securityfocus.com/bid/9937/info XWeb is reportedly prone to directory traversal attacks. Remote attackers may exploit this issue to gain access to sensitive files outside of the server root. This would occur in the context of the server, i.e.: an...
CVE-2004-0272
SQL injection vulnerability in MaxWebPortal allows remote attackers to inject arbitrary SQL code and gain sensitive information via the SendTo parameter in Personal Messages...
CVE-2003-1257
findthenihome.php in E-theni allows remote attackers to obtain sensitive system information via a URL request which executes phpinfo...
CVE-2003-0747
wgate.dll in SAP Internet Transaction Server ITS 4620.2.0.323011 allows remote attackers to obtain potentially sensitive information such as directory structure and operating system via incorrect parameters 1 service, 2 templatelanguage, 3 language, 4 theme, or 5 template, which leaks the...
CVE-2003-0401
Vignette StoryServer and Vignette V/5 allows remote attackers to obtain sensitive information via a request for the /vgn/style template...
CVE-2002-1555
Cisco ONS15454 and ONS15327 running ONS before 3.4 uses a "public" SNMP community string that cannot be changed, which allows remote attackers to obtain sensitive information...
CVE-2002-1725
phpimageview.php in PHPImageView 1.0 allows remote attackers to obtain sensitive information via the pw=show option, which invokes the phpinfo function...
CVE-2002-0563
The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authentication, including Dynamic Monitoring Services 1 dms0, 2 dms/DMSDump, 3 servlet/DMSDump, 4 servlet/Spy, 5 soap/servlet/Spy, and 6 dms/AggreSpy; and Oracle Ja...
CVE-1999-1335
snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read and write sensitive information...
CVE-1999-1141
Ascom Timeplex router allows remote attackers to obtain sensitive information or conduct unauthorized activities by entering debug mode through a sequence of CTRL-D characters...
CVE-2001-1366
netscript before 1.6.3 parses dynamic variables, which could allow remote attackers to alter program behavior or obtain sensitive information...
RealServer 5.06.07.0 - Memory Contents Disclosure
RealServer 5.06.07.0 - Memory Contents Disclosure source : https://www.securityfocus.com/bid/1957/info RealServer is a popular streaming audio and video server from Real Networks. A vulnerability exists in all versions of RealServer 7 and below that could allow a remote attacker to gain...
CVE-2000-0862
Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modify sensitive configuration information...