Joomla! Component com_br - 'Controller' Local File Inclusion

source: https://www.securityfocus.com/bid/51613/info The 'combr' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute...

Joomla! Component com_boss - Controller Local File Inclusion

Joomla! Component comboss - Controller Local File Inclusion source: https://www.securityfocus.com/bid/51619/info The 'comboss' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability...

Joomla! Component com_kp - Controller Local File Inclusion

Joomla! Component comkp - Controller Local File Inclusion source: https://www.securityfocus.com/bid/51623/info The 'comkp' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to...

Raven 1.0 - connector.asp Arbitrary File Upload

Raven 1.0 - connector.asp Arbitrary File Upload source: https://www.securityfocus.com/bid/51631/info Raven is prone to a vulnerability that lets an attacker upload and execute arbitrary script code in the context of the affected webserver process. The issue occurs because the application fails to...

Joomla! Component com_bulkenquery - Controller Local File Inclusion

Joomla! Component combulkenquery - Controller Local File Inclusion source: https://www.securityfocus.com/bid/51622/info The 'combulkenquery' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this...

Joomla! Component com_some - 'Controller' Local File Inclusion

source: https://www.securityfocus.com/bid/51621/info The 'comsome' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute...

Joomla! Component com_bulkenquery - 'Controller' Local File Inclusion

source: https://www.securityfocus.com/bid/51622/info The 'combulkenquery' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and...

Joomla! Component com_boss - 'Controller' Local File Inclusion

source: https://www.securityfocus.com/bid/51619/info The 'comboss' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute...

Raven 1.0 - 'connector.asp' Arbitrary File Upload

source: https://www.securityfocus.com/bid/51631/info Raven is prone to a vulnerability that lets an attacker upload and execute arbitrary script code in the context of the affected webserver process. The issue occurs because the application fails to sufficiently sanitize user-supplied input. Rave...

w-CMS <= 2.0.1 Multiple Vulnerabilities - Active Check

w-CMS is prone to multiple HTML-injection vulnerabilities and a local file include LFI vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Enigma2 'file' Parameter Information Disclosure Vulnerability

Enigma2 is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attacker can exploit this issue to download local files in the context of the webserver process. This may allow the attacker to obtain sensitive information; other attacks...

SAPID CMS Multiple Remote File Include Vulnerabilities

SAPID CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information or to execute arbitrary script code in the context of the webserver process. This...

HServer webserver directory traversal

Directory traversal with HTML-encoded requests...

IpTools 0.1.4 Directory Traversal

Title: IpToolsTiny TCP/IP server - WebServer Directory Traversal Vulnerability Software : IpToolsTiny TCP/IP server Software Version : 0.1.4 Vendor: http://iptools.sourceforge.net/iptools.html Class: Input Validation Error CVE: Remote: Yes Local: No Published: 2012-01-06 Updated: Impact : High Bu...

HServer Webserver Multiple Directory Traversal Vulnerabilities

The host is running HServer Webserver and is prone to multiple directory traversal vulnerabilities. OpenVAS Vulnerability Test $Id: gbhserverwebservermultdirtravvuln.nasl 5833 2017-04-03 08:45:01Z cfi $ HServer Multiple Webserver Directory Traversal Vulnerabilities Authors: Antu Sanadi Copyright:...

QuiXplorer 'index.php' Arbitrary File Upload Vulnerability

QuiXplorer is prone to an arbitrary-file-upload vulnerability because the application fails to adequately sanitize user-supplied input. An attacker can exploit this issue to upload arbitrary code and run it in the context of the webserver process. QuiXplorer 2.3 is vulnerable; other versions may...

QuiXplorer 'index.php' Arbitrary File Upload Vulnerability

QuiXplorer is prone to an arbitrary-file-upload vulnerability because the application fails to adequately sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...

CVE-2009-5111

GoAhead WebServer allows remote attackers to cause a denial of service daemon outage via partial HTTP requests, as demonstrated by Slowloris...

Design/Logic Flaw

GoAhead WebServer allows remote attackers to cause a denial of service daemon outage via partial HTTP requests, as demonstrated by Slowloris...

CVE-2009-5111

Affected product: GoAhead WebServer. Vulnerability arises from handling of partial HTTP requests, enabling remote attackers to cause a denial of service (daemon outage) as demonstrated by Slowloris. Exploitation details and practical impact are stated; no patch/version or remediation is provided ...