1388 matches found
CVE-2006-0370
RCBlog 1.03 is affected by CVE-2006-0370 due to insufficient access control that allows remote attackers to view account names and MD5 password hashes by accessing data and config directories under the web root. OpenVAS/Nessus entries corroborate a related directory traversal/vector in RCBlog’s P...
adv20060116.txt
========================================================== Title: Directory traversal in phpXplorer Application: phpXplorer Vendor: http://www.phpxplorer.org Vulnerable Versions: 0.9.33 Bug: directory traversal Date: 16-January-2006 Author: Oriol Torrent Santiago References:...
[Full-disclosure] Secunia Research: ADOdb Insecure Test Scripts Security Issues
====================================================================== Secunia Research 09/01/2006 - ADOdb Insecure Test Scripts Security Issues - ====================================================================== Table of Contents Affected...
CVE-2005-4859
mimicboard2 Mimic2 086 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mimic2.dat...
CVE-2005-4421
Dev-Editor 3.0 allows remote attackers to access any directory outside the web root whose name is a substring of the web root directory name...
PT-2005-4937 · Adp · Adp Forum
Name of the Vulnerable Software and Affected Versions: ADP Forum versions 2.0 through 2.0.3 Description: The issue allows remote attackers to obtain user credentials due to sensitive information being stored in plaintext files under the web document root with insufficient access control. This can...
CVE-2004-2617
Directory traversal vulnerability in Pegasi Web Server PWS 0.2.2 allows remote attackers to read files outside of the web root via a .. dot dot directly after the initial '/' slash in the URI...
CVE-2002-2158
The CVE CVE-2002-2158 affects zenTrack 2.0.3 and earlier and causes an information disclosure: remote attackers can obtain the full path to the web root via an invalid ticket ID, leaking the path in an error message. The available documents confirm the affected software/component (zenTrack) and t...
CVE-2002-2158
zenTrack 2.0.3 and earlier allows remote attackers to obtain the full path to the web root via an invalid ticket ID, which leaks the path in an error message...
CVE-2005-3551
toendaCMS before 0.6.2 stores user account and session data in the web root directory, which allows remote attackers to obtain sensitive information via a direct request to the appropriate XML file...
CVE-2005-3551
toendaCMS before 0.6.2 stores user account and session data in the web root directory, which allows remote attackers to obtain sensitive information via a direct request to the appropriate XML file...
Sgdynamo 'sgdynamo.exe' Physical Path Disclosure Vulnerability
The CGI SPDX-FileCopyrightText: 2003 Scott Shebby Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11954";...
RaidenHTTPD directory traversal
The remote host is running a version of RaidenHTTPD which is vulnerable to a remote directory traversal bug. An attacker exploiting this bug would be able to gain access to potentially confidential material outside of the web root. OpenVAS Vulnerability Test $Id: raidenHTTPDdirtraversal.nasl 6063...
IIS 5.0 Sample App reveals physical path of web root
A sample application shipped with IIS 5.0 discloses the physical path of the web root. An attacker can use this information to make more focused attacks. OpenVAS Vulnerability Test $Id: iis5samplepath.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: IIS 5.0 Sample App reveals physical path of...
Oracle 9iAS default error information disclosure
It is possible to obtain the physical path of the remote server web root. Description : Oracle 9iAS allows remote attackers to obtain the physical path of a file under the server root via a request for a non-existent .JSP file. The default error generated leaks the pathname in an error message...
Check for Apache Multiple / vulnerability
Certain versions of Apache for Win32 have a bug wherein remote users can list directory entries. Specifically, by appending multiple /'s to the HTTP GET command, the remote Apache server will list all files and subdirectories within the web root as defined in httpd.conf. OpenVAS Vulnerability Tes...
IIS 5.0 Sample App reveals physical path of web root
A sample application shipped with IIS 5.0 discloses the physical path of the web root. An attacker can use this information to make more focused attacks. SPDX-FileCopyrightText: 2000 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
[SA17240] MailSite Express Attachment Upload Vulnerability
TITLE: MailSite Express Attachment Upload Vulnerability SECUNIA ADVISORY ID: SA17240 VERIFY ADVISORY: http://secunia.com/advisories/17240/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: MailSite 6.x http://secunia.com/product/5898/ DESCRIPTION: Soroush dalili has...
