Directory Traversal in SafeNet Sentinel Protection Server and Keys Server

SUMMARY ======= SafeNet Inc.'s Sentinel Protection Server and Sentinel Keys Server products include web servers which are vulnerable to directory traversal attacks. A remote attacker could exploit these vulnerabilities to read arbitrary files with the permissions of the web server, typically...

sentineldetails-traverse.txt

SUMMARY ======= SafeNet Inc.'s Sentinel Protection Server and Sentinel Keys Server products include web servers which are vulnerable to directory traversal attacks. A remote attacker could exploit these vulnerabilities to read arbitrary files with the permissions of the web server, typically...

CVE-2007-5473

StaticFileHandler.cs in System.Web in Mono before 1.2.5.2, when running on Windows, allows remote attackers to obtain source code of sensitive files via a request containing a trailing 1 space or 2 dot, which is not properly handled by XSP...

Code injection

libclamav/others.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 uses insecure permissions for temporary files that are created by the cligentempstream function in clamd/clamdscan, which might allow local users to read sensitive files...

CVE-2007-3024

libclamav/others.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 uses insecure permissions for temporary files that are created by the cligentempstream function in clamd/clamdscan, which might allow local users to read sensitive files...

CVE-2007-3024

libclamav/others.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 uses insecure permissions for temporary files that are created by the cligentempstream function in clamd/clamdscan, which might allow local users to read sensitive files...

SOL7397 - Download of local FirePass files using the URL in Webtop or the Admin UI

A vulnerability exists that allows an authenticated FirePass user to download files from the filesystem of a FirePass controller. In order to download a file, the user must first log in to the FirePass controller webtop or the Admin UI, and type a specially crafted URL into their web browser. Thi...

Pagode 0.5.8 (navigator_ok.php asolute) Remote File Disclosure Vuln

No description provided by source. Pagode 0.5.8navigatorok.php asoluteRemote File Disclosure D.Script:http://belnet.dl.sourceforge.net/sourceforge/pagode/pagode-0.5.8.tar.gz Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc V.Code In /navigator/navigatorok.php:...

Microsoft Windows ReadDirectoryChangesW information leak

ReadDirectoryChangesW API function doesn't check user's privileges for subtree folders, making it's possible for unprivileged user to gather information about sensitive files...

Ezboo webstats acces to sensitive files

Ezboo webstats acces to sensitive files By : sn0oPy Risk : medium site : http://www.ezboo.com/softs exploit : juste add this files to the url : http://www.target.ma/ezwebstats/update.php http://www.target.ma/ezwebstats/config.php Dork : inurl:"/ezWebStats/" intitle:"ezBOO WebStats" contact :...

ezboo-bad.txt

Ezboo webstats acces to sensitive files By : sn0oPy Risk : medium site : http://www.ezboo.com/softs exploit : juste add this files to the url : http://www.target.ma/ezwebstats/update.php http://www.target.ma/ezwebstats/config.php Dork : inurl:"/ezWebStats/" intitle:"ezBOO WebStats" contact :...

nabopoll 1.2 Remote Unprotected Admin Section Vulnerability

Exploit for unknown platform in category web applications =========================================================== nabopoll 1.2 Remote Unprotected Admin Section Vulnerability =========================================================== nabopoll 1.1.2 sensitive file admin without password By :...

CVE-2007-0620

download.php in FD Script 1.3.2 and earlier allows remote attackers to read source of files under the web document root with certain extensions, including .php, via a relative pathname in the fname parameter, as demonstrated by downloading config.php...

arsdigita-traverse.txt

SUMMARY ======= A directory traversal vulnerability exists in the Ars Digita Community System. A remote attacker could exploit this vulnerability to read arbitrary files with the permissions of the web server. AFFECTED SOFTWARE ================= Ars Digita Community System ACS 3.4.9, 3.4.10, and...

Directory traversal

download.php in Joonas Viljanen JV2 Folder Gallery allows remote attackers to read sensitive files via a relative pathname in the file parameter, as demonstrated by config/gallerysetup.php. NOTE: this issue might be resultant from a directory traversal vulnerability...

Php/Mysql Site Builder 0.0.2 (htm2php.php) File Disclosure Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Php/Mysql Site Builder 0.0.2 htm2php.php File Disclosure Vulnerability ======================================================================== PHPBuilder v0.0.2 Remo...

CGI Hack finishing-vulnerability warning-the black bar safety net

The General idea, skip the limit, view sensitive files and password-related files. Write the word cgi, into the background try pass webshell（background if the authentication or MD5 over time, you can try to cookies spoofing, local submit, and look for the executable in the directory and the...

Xerox WorkCentre Multiple Vulnerabilities

Binary data 3834.prm...

CVE-2006-5406

Passgo Defender 5.2 creates the application directory with insecure permissions Everyone/Full Control, which allows local users to read and modify sensitive files. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-5406

Passgo Defender 5.2 creates the application directory with insecure permissions Everyone/Full Control, which allows local users to read and modify sensitive files. NOTE: the provenance of this information is unknown; the details are obtained from third party information...