Allaire ColdFusion Server 4.0 - Remote File Display Deletion Upload Execution

Allaire ColdFusion Server 4.0 - Remote File Display Deletion Upload Execution source: https://www.securityfocus.com/bid/115/info To display and delete any file on the system use an URL of the following form: http://www.victim.test/cfdocs/expeval/ExprCalc.cfm?OpenFilePath=C:\the\target\file To...

CVE-1999-0937

BNBForm allows remote attackers to read arbitrary files via the automessage hidden form variable...

Novell Netware Web Server 3.x - files.pl

Novell Netware Web Server 3.x - files.pl source: https://www.securityfocus.com/bid/2076/info Novell Web Server 3.x Examples Toolkit v.2 is a package containing example scripts and HTML files to help administrators design web sites. It is not a support Novell product and is provided solely as a...

CVE-1999-0897

iChat ROOMS Webserver allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-1999-1437

ePerl 2.2.12 allows remote attackers to read arbitrary files and possibly execute certain commands by specifying a full pathname of the target file as an argument to bar.phtml...

CVE-1999-0266

The info2www CGI script allows remote file access or remote command execution...

Muhammad A. Muquit wwwcount 2.3 - 'Count.cgi' Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/128/info Wwwcount count.cgi is a very popular CGI program used to track website usage. In particular, it enumerates the number of hits on given webpages and increments them on a 'counter'. In October of 1997 two remotely exploitable problems were...

PT-1996-1032 · Novell · Novell Web Server

Name of the Vulnerable Software and Affected Versions: Novell web server affected versions not specified Description: The issue allows remote attackers to read any file on the system that is internally accessible by the web server due to a problem in the convert.bas program. Recommendations: At t...

AZL-7381 CVE-1999-1090 affecting package telnet 0.17-81

The default configuration of NCSA Telnet package for Macintosh and PC enables FTP, even though it does not include an "ftp=yes" line, which allows remote attackers to read and modify arbitrary files...

PT-2005-5579 · Debian +1 · Gftp-Gtk +5

Name of the Vulnerable Software and Affected Versions: gftp versions prior to 2.0.18 gftp-common affected versions not specified gftp-gtk affected versions not specified gftp-text affected versions not specified Description: The issue concerns multiple vulnerabilities in the gftp package of the...