247 matches found
Brooky CubeCart 2.0.12.0.4 - index.php?language Cross-Site Scripting
Brooky CubeCart 2.0.12.0.4 - index.php?language Cross-Site Scripting source: https://www.securityfocus.com/bid/12549/info Brooky CubeCart is reported prone to multiple vulnerabilities. These issues result from insufficient sanitization of user-supplied data and may allow remote attackers to...
Brooky CubeCart 2.0.1/2.0.4 - 'index.php?language' Cross-Site Scripting
source: https://www.securityfocus.com/bid/12549/info Brooky CubeCart is reported prone to multiple vulnerabilities. These issues result from insufficient sanitization of user-supplied data and may allow remote attackers to disclose arbitrary files and carry out cross-site scripting attacks. The...
darryl burgdorf weblibs 1.0 - Directory Traversal
darryl burgdorf weblibs 1.0 - Directory Traversal source: https://www.securityfocus.com/bid/11848/info It is reported that WebLibs is prone to a remote directory traversal vulnerability. This issue is due to a failure of the application to properly filter user-supplied input. WebLibs 1.0 is...
Blog Torrent < 0.81 btdownload.php Multiple Vulnerabilities
There is a remote directory traversal vulnerability in Blog Torrent, a web-based application that allows users to host files for Bit Torrents. There is a cross-site scripting issue in the remote version of this software that may allow an attacker to set up attacks against third parties by using t...
darryl burgdorf weblibs 1.0 - Directory Traversal
source: https://www.securityfocus.com/bid/11848/info It is reported that WebLibs is prone to a remote directory traversal vulnerability. This issue is due to a failure of the application to properly filter user-supplied input. WebLibs 1.0 is affected by this vulnerability. The following proof of...
Blog Torrent 0.8 - Directory Traversal
Blog Torrent 0.8 - Directory Traversal source: https://www.securityfocus.com/bid/11795/info It is reported that Blog Torrent is prone to a remote directory traversal vulnerability. This issue is due to a failure of the server process to properly filter user supplied input. Blog Torrent preview 0....
KorWeblog 1.6.2 - Remote Directory Listing
source: https://www.securityfocus.com/bid/11744/info A vulnerability is reported in the KorWeblog software that may allow a remote user to disclose directory listings. The problem presents itself when a malicious user crafts an URI request containing directory traversal sequences. When properly...
KorWeblog 1.6.2 - Remote Directory Listing
KorWeblog 1.6.2 - Remote Directory Listing source: https://www.securityfocus.com/bid/11744/info A vulnerability is reported in the KorWeblog software that may allow a remote user to disclose directory listings. The problem presents itself when a malicious user crafts an URI request containing...
PWebServer 0.3.x - Directory Traversal
source: https://www.securityfocus.com/bid/9817/info It has been reported that PWebServer is prone to a remote directory traversal vulnerability. This issue is due to a failure of the server process to properly filter user supplied URI requests. Information acquired by exploiting this issue may be...
FirstClass 7.1 HTTP Server: Remote Directory Listing
FirstClass 7.1 HTTP Server allow the listing of all files under the web root directory and user web directories. This can be achieved by appending "/Search" to the URL. The browser will present a file searching form. If all check boxes search options are selected, and the filename text box is lef...
CVE-2003-0802
Nokia Electronic Documentation NED 5.0 allows remote attackers to obtain a directory listing of the WebLogic web root, and the physical path of the NED server, via a "retrieve" action with a location parameter of . dot...
minihttp file-sharing for net 1.5 - Directory Traversal
minihttp file-sharing for net 1.5 - Directory Traversal source: https://www.securityfocus.com/bid/8619/info It has been reported that WebForums and File-Sharing for NET are prone to a remote directory traversal attack due to insufficient sanitization of user-supplied data. This vulnerability coul...
ColdFusion MX - Remote Development Service
ColdFusion MX - Remote Development Service !/usr/bin/perl RDScDump.pl By angry packet THIS IS AN UNPATCHED VULNERABILITY - THIS IS AN UNPATCHED VULNERABILITY ColdFusion 6 MX Server does several things in order to get remote dir structure so we will need to recreate these functions. This is a...
SFAD03-001: iWeb Mini Web Server Remote Directory Traversal
================================================================= ...............: S e c u r i t y F r e a k s :............... .................: www.securityfreaks.com :.................. ================================================================= Title : iWeb Mini Web Server Remote...
SFAD03-001.txt
================================================================= ...............: S e c u r i t y F r e a k s :............... .................: www.securityfreaks.com :.................. ================================================================= Title : iWeb Mini Web Server Remote...
BRS Webweaver 1.0 1 - MKDir Directory Traversal
BRS Webweaver 1.0 1 - MKDir Directory Traversal source: https://www.securityfocus.com/bid/6585/info WebWeaver's FTP component has a flaw which can permit a remote user to create directories outside the FTP root. By executing the mkdir command on an ftp server with dot-dot-slash ..\ directory...
Vulnerability in Apache Tomcat v3.23 & v3.24
Procheckup Ltd www.procheckup.com Procheckup Security Bulletin PR02-05 Description: Tomcat source.jsp directory listing and webroot location display Date: 8/1/2002 Application: Apache Tomcat Java server versions 3.23 and 3.24 Platform: Linux/Unix Severity: Remote attackers can obtain listings of...
CVE-2002-0203
ttawebtop.cgi in Tarantella Enterprise 3.20 on SPARC Solaris and Linux, and 3.1x and 3.0x including 3.11.903, allows remote attackers to view directory contents via an empty pg parameter...
PT-2002-1274 · Oracle · Tarantella Enterprise
Name of the Vulnerable Software and Affected Versions: Tarantella Enterprise versions 3.0x through 3.20 Tarantella Enterprise version 3.11.903 Description: The issue allows remote attackers to view directory contents. This is achieved by providing an empty pg parameter in the ttawebtop.cgi script...
