Vulnerabilities (CVE)

Filtered by CWE-22
Total 6174 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2004-2750 1 Jbrowser 1 Jbrowser 2008-09-05 5.0 MEDIUM N/A
Directory traversal vulnerability in browser.php in JBrowser 1.0 through 2.1 allows remote attackers to read arbitrary files via the directory parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2003-1542 1 Ondrej Jombik 1 Phpwebfilemanager 2008-09-05 5.0 MEDIUM N/A
Directory traversal vulnerability in plugins/file.php in phpWebFileManager before 0.4.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the fm_path parameter.
CVE-2003-1537 1 Postnuke Software Foundation 1 Postnuke 2008-09-05 5.0 MEDIUM N/A
Directory traversal vulnerability in PostNuke 0.723 and earlier allows remote attackers to include arbitrary files named theme.php via the theme parameter to index.php.
CVE-2002-2416 1 Zeroo 1 Http Server 2008-09-05 5.0 MEDIUM N/A
Directory traversal vulnerability in Zeroo web server 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL GET request.
CVE-2002-2403 1 Key Focus 1 Kf Web Server 2008-09-05 5.0 MEDIUM N/A
Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to read arbitrary files for recognized MIME type files via "...", "....", ".....", and other multiple dot sequences.
CVE-2002-2399 1 Cascadesoft 1 W3mail 2008-09-05 6.4 MEDIUM N/A
Directory traversal vulnerability in viewAttachment.cgi in W3Mail 1.0.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
CVE-2002-2387 1 Mollensoft Software 1 Hyperion Ftp Server 2008-09-05 5.0 MEDIUM N/A
Directory traversal vulnerability in Hyperion FTP server 2.8.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the LS command.
CVE-2002-2375 1 Stalker 1 Communigate Pro 2008-09-05 5.0 MEDIUM N/A
Directory traversal vulnerability in CommuniGate Pro 4.0b4 and possibly earlier versions allows remote attackers to list the contents of the WebUser directory and its parent directory via a (1) .. (dot dot) or (2) . (dot) in a URL. NOTE: it is not clear whether this issue reveals any more information regarding directory structure than is already available to any CommuniGate Pro user, although there is a possibility that it could be used to infer product version information.
CVE-2002-2351 1 Qualcomm 1 Eudora 2008-09-05 6.4 MEDIUM N/A
Eudora 5.1 allows remote attackers to bypass security warnings and possibly execute arbitrary code via attachments with names containing a trailing "." (dot).
CVE-2002-2229 1 Sapio Design Ltd 1 Webreflex 2008-09-05 5.0 MEDIUM N/A
Directory traversal vulnerability in Sapio Design Ltd. WebReflex 1.53 allows remote attackers to read arbitrary files via a .. in an HTTP request.
CVE-2008-3939 1 Avtech 1 Pager Enterprise 2008-09-05 5.0 MEDIUM N/A
Directory traversal vulnerability in the web interface in AVTECH PageR Enterprise before 5.0.7 allows remote attackers to read arbitrary files via directory traversal sequences in the URI.
CVE-2007-5927 1 Openbase International Ltd 1 Openbase 2008-09-05 9.0 HIGH N/A
Directory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated users to create files with arbitrary contents via a .. (dot dot) in the first argument to the GlobalLog stored procedure. NOTE: this can be leveraged to execute arbitrary code using CVE-2007-5926.
CVE-2005-1813 1 Futuresoft 1 Tftp Server 2000 2008-09-05 7.8 HIGH N/A
Directory traversal vulnerability in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allows remote attackers to read arbitrary files via a TFTP GET request containing (1) "../" (dot dot slash) or (2) "..\" (dot dot backslash) sequences.
CVE-2007-3967 1 Dirlist 1 Dirlist Php 2008-09-05 5.0 MEDIUM N/A
Directory traversal vulnerability in index.php in PHP Directory Lister (dirLIST) before 0.1.1 allows remote attackers to list the contents of a parent directory via a .. (dot dot) in the folder parameter.