Lucene search
+L

212 matches found

ATTACKERKB
ATTACKERKB
added 2007/04/16 10:19 p.m.3 views

CVE-2007-2048

Directory traversal vulnerability in /console in the Management Console in webMethods Glue 6.5.1 and earlier allows remote attackers to read arbitrary system files via a .. dot dot in the resource parameter...

5CVSS5.8AI score0.03828EPSS
SaveExploits2References10
Prion
Prion
added 2007/04/16 10:19 p.m.16 views

Directory traversal

Directory traversal vulnerability in /console in the Management Console in webMethods Glue 6.5.1 and earlier allows remote attackers to read arbitrary system files via a .. dot dot in the resource parameter...

5CVSS7.1AI score0.03828EPSS
SaveExploits2References9Affected Software1
NVD
NVD
added 2007/04/16 10:19 p.m.22 views

CVE-2007-2048

Directory traversal vulnerability in /console in the Management Console in webMethods Glue 6.5.1 and earlier allows remote attackers to read arbitrary system files via a .. dot dot in the resource parameter...

5CVSS6.7AI score0.03828EPSS
SaveExploits2References9
CVE
CVE
added 2007/04/16 10:0 p.m.57 views

CVE-2007-2048

CVE-2007-2048 affects webMethods Glue prior to and including 6.5.1, specifically the Management Console’s /console. The vulnerability arises from insufficient validation of the resource parameter, allowing a directory traversal via .. to read arbitrary server files. Impact is reading sensitive fi...

5CVSS6.7AI score0.03828EPSS
SaveExploits2References9Affected Software1
Cvelist
Cvelist
added 2007/04/16 10:0 p.m.31 views

CVE-2007-2048

Directory traversal vulnerability in /console in the Management Console in webMethods Glue 6.5.1 and earlier allows remote attackers to read arbitrary system files via a .. dot dot in the resource parameter...

6.7AI score0.03828EPSS
SaveExploits2References9
Packet Storm
Packet Storm
added 2007/04/12 12:0 a.m.22 views

glue-lfi.txt

aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 11-Apr-2007 Software: webMethods - webMethods Glue Management Console http://www.webmethods.com/ "With webMethods Glue developers can easily create SOAP interfaces for their existing Java and C/C++...

7.4AI score
SaveExploits0
securityvulns
securityvulns
added 2007/04/11 12:0 a.m.125 views

webMethods Glue Management Console Directory Traversal

aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 11-Apr-2007 Software: webMethods - webMethods Glue Management Console http://www.webmethods.com/ "With webMethods Glue developers can easily create SOAP interfaces for their existing Java and C/C++...

0.5AI score
SaveExploits0
exploitpack
exploitpack
added 2007/04/11 12:0 a.m.16 views

webMethods Glue 6.5.1 Console - Directory Traversal

webMethods Glue 6.5.1 Console - Directory Traversal source: https://www.securityfocus.com/bid/23423/info webMethods Glue is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary file...

SaveExploits0
Exploit DB
Exploit DB
added 2007/04/11 12:0 a.m.24 views

webMethods Glue 6.5.1 Console - Directory Traversal

source: https://www.securityfocus.com/bid/23423/info webMethods Glue is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable computer with the privileges o...

5CVSS5.8AI score0.03828EPSS
SaveExploits2
Prion
Prion
added 2006/02/16 11:2 a.m.20 views

Directory traversal

Directory traversal vulnerability in SAP Business Connector BC 4.6 and 4.7 allows remote attackers to read or delete arbitrary files via the fullName parameter to 1 sapbc/SAP/chopSAPLog.dsp or 2 invoke/sap.monitor.rfcTrace/deleteSingle. Details will be updated after the grace period has ended...

6.4CVSS7.3AI score0.02542EPSS
SaveExploits0References10Affected Software1
NVD
NVD
added 2006/02/16 11:2 a.m.14 views

CVE-2006-0732

Directory traversal vulnerability in SAP Business Connector BC 4.6 and 4.7 allows remote attackers to read or delete arbitrary files via the fullName parameter to 1 sapbc/SAP/chopSAPLog.dsp or 2 invoke/sap.monitor.rfcTrace/deleteSingle. Details will be updated after the grace period has ended...

6.4CVSS6.7AI score0.02542EPSS
SaveExploits0References10
Cvelist
Cvelist
added 2006/02/16 11:0 a.m.22 views

CVE-2006-0732

Directory traversal vulnerability in SAP Business Connector BC 4.6 and 4.7 allows remote attackers to read or delete arbitrary files via the fullName parameter to 1 sapbc/SAP/chopSAPLog.dsp or 2 invoke/sap.monitor.rfcTrace/deleteSingle. Details will be updated after the grace period has ended...

6.7AI score0.02542EPSS
SaveExploits0References10
Rows per page
Query Builder