rainbutterfly/cve_corpus huggingface dataset:
CVE-2003-1101 
Hummingbird CyberDOCS 3.5.1, 3.9, and 4.0 allows remote attackers to obtain the full path of the DM Web Server via invalid login credentials, which reveals the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-11T05:00:00.000Z
CVE-2003-1102 
Hummingbird CyberDOCS 3.5, 3.9, and 4.0, when running on IIS, uses insecure permissions for script source code files, which allows remote attackers to read the source code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-11T05:00:00.000Z
CVE-2003-1103 
SQL injection vulnerability in loginact.asp for Hummingbird CyberDOCS before 3.9 allows remote attackers to execute arbitrary SQL commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-11T05:00:00.000Z
CVE-2003-1104 
Buffer overflow in IBM Tivoli Firewall Toolbox (TFST) 1.2 allows remote attackers to execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-11T05:00:00.000Z
CVE-2003-1105 
Unknown vulnerability in Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to cause a denial of service (browser or Outlook Express crash) via HTML with certain input tags that are not properly rendered.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-11T05:00:00.000Z
CVE-2003-1106 
The SMTP service in Microsoft Windows 2000 before SP4 allows remote attackers to cause a denial of service (crash or hang) via an e-mail message with a malformed time stamp in the FILETIME attribute.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-11T05:00:00.000Z
CVE-2003-1107 
The DHTML capability in Microsoft Windows Media Player (WMP) 6.4, 7.0, 7.1, and 9 may run certain URL commands from a security zone that is less trusted than the current zone, which allows attackers to bypass intended access restrictions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-11T05:00:00.000Z
CVE-2003-1108 
The Session Initiation Protocol (SIP) implementation in Alcatel OmniPCX Enterprise 5.0 Lx allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-11T05:00:00.000Z
CVE-2003-1109 
The Session Initiation Protocol (SIP) implementation in multiple Cisco products including IP Phone models 7940 and 7960, IOS versions in the 12.2 train, and Secure PIX 5.2.9 to 6.2.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-11T05:00:00.000Z
CVE-2003-1110 
The Session Initiation Protocol (SIP) implementation in Columbia SIP User Agent (sipc) 1.74 and other versions before sipc 2.0 build 2003-02-21 allows remote attackers to cause a denial of service or execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-11T05:00:00.000Z
CVE-2003-1111 
The Session Initiation Protocol (SIP) implementation in multiple dynamicsoft products including y and certain demo products for AppEngine allows remote attackers to cause a denial of service or execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-11T05:00:00.000Z
CVE-2003-1112 
The Session Initiation Protocol (SIP) implementation in Ingate Firewall and Ingate SIParator before 3.1.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-11T05:00:00.000Z
CVE-2003-1113 
The Session Initiation Protocol (SIP) implementation in IPTel SIP Express Router 0.8.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-11T05:00:00.000Z
CVE-2003-1114 
The Session Initiation Protocol (SIP) implementation in Mediatrix Telecom VoIP Access Devices and Gateways running SIPv2.4 and SIPv4.3 firmware allows remote attackers to cause a denial of service or execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-11T05:00:00.000Z
CVE-2003-1115 
The Session Initiation Protocol (SIP) implementation in Nortel Networks Succession Communication Server 2000, when using SIP-T, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-11T05:00:00.000Z
CVE-2003-1116 
The communications protocol for the Report Review Agent (RRA), aka FND File Server (FNDFS) program, in Oracle E-Business Suite 10.7, 11.0, and 11.5.1 to 11.5.8 allows remote attackers to bypass authentication and obtain sensitive information from the Oracle Applications Concurrent Manager by spoofing requests to the TNS Listener.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-12T05:00:00.000Z
CVE-2003-1117 
Buffer overflow in RealSystem Server 6.x, 7.x and 8.x, and RealSystem Proxy 8.x, related to URL error handling, allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-12T05:00:00.000Z
CVE-2003-1118 
Buffer overflow in the SETI@home client 3.03 and other versions allows remote attackers to cause a denial of service (client crash) and execute arbitrary code via a spoofed server response containing a long string followed by a \n (newline) character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-12T05:00:00.000Z
CVE-2003-1119 
SSH Secure Shell before 3.2.9 allows remote attackers to cause a denial of service via malformed BER/DER packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-12T05:00:00.000Z
CVE-2003-1120 
Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix, when the password change plugin (ssh-passwd-plugin) is enabled, allows local users to obtain the server's private key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-12T05:00:00.000Z
CVE-2003-1121 
Services in ScriptLogic 4.01, and possibly other versions before 4.14, process client requests at raised privileges, which allows remote attackers to (1) modify arbitrary registry entries via the ScriptLogic RPC service (SLRPC) or (2) modify arbitrary configuration via the RunAdmin services (SLRAserver.exe and SLRAclient.exe).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-12T05:00:00.000Z
CVE-2003-1122 
ScriptLogic 4.01, and possibly other versions before 4.14, uses insecure permissions for the LOGS$ share, which allows users to modify log records and possibly execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-12T05:00:00.000Z
CVE-2003-1123 
Sun Java Runtime Environment (JRE) and SDK 1.4.0_01 and earlier allows untrusted applets to access certain information within trusted applets, which allows attackers to bypass the restrictions of the Java security model.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-12T05:00:00.000Z
CVE-2003-1124 
Unknown vulnerability in Sun Management Center (SunMC) 2.1.1, 3.0, and 3.0 Revenue Release (RR), when installed and run by root, allows local users to create or modify arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-12T05:00:00.000Z
CVE-2003-1125 
Unknown vulnerability in ns-ldapd for Sun ONE Directory Server 4.16, 5.0, and 5.1 allows LDAP clients to cause a denial of service (service halt).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-12T05:00:00.000Z
CVE-2003-1126 
Unknown vulnerability in SunOne/iPlanet Web Server SP3 through SP5 on Windows platforms allows remote attackers to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-12T05:00:00.000Z
CVE-2003-1127 
Whale Communications e-Gap 2.5 on Windows 2000 allows remote attackers to obtain the source code for the login page via the HTTP TRACE method, which bypasses the preprocessor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-12T05:00:00.000Z
CVE-2003-1128 
XMMS.pm in X2 XMMS Remote, as obtained from the vendor server between 4 AM 11 AM PST on May 7, 2003, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to TCP port 8086.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-12T05:00:00.000Z
CVE-2003-1129 
Buffer overflow in the Yahoo! Audio Conferencing (aka Voice Chat) ActiveX control before 1,0,0,45 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a URL with a long hostname to Yahoo! Messenger or Yahoo! Chat.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-12T05:00:00.000Z
CVE-2003-1131 
PHP remote file inclusion vulnerability in index.php in KnowledgeBuilder, referred to as KnowledgeBase, allows remote attackers to execute arbitrary PHP code by modifying the page parameter to reference a URL on a remote web server that contains the code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2003-1132 
The DNS server for Cisco Content Service Switch (CSS) 11000 and 11500, when prompted for a nonexistent AAAA record, responds with response code 3 (NXDOMAIN or "Name Error") instead of response code 0 ("No Error"), which allows remote attackers to cause a denial of service (inaccessible domain) by forcing other DNS servers to send and cache a request for a AAAA record to the vulnerable server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-21T04:00:00.000Z
CVE-2003-1133 
Rit Research Labs The Bat! 1.0.11 through 2.0 creates new accounts with insecure ACLs, which allows local users to read other users' email messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1134 
Sun Java 1.3.1, 1.4.1, and 1.4.2 allows local users to cause a denial of service (JVM crash), possibly by calling the ClassDepth function with a null parameter, which causes a crash instead of generating a null pointer exception.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1135 
Buffer overflow in Yahoo! Messenger 5.6 allows remote attackers to cause a denial of service (crash) via a file send request (sendfile) with a large number of "%" (percent) characters after the Yahoo ID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1136 
Cross-site scripting (XSS) vulnerability in Chi Kien Uong Guestbook 1.51 allows remote attackers to inject arbitrary web script or HTML via (1) HTML in a posted message or (2) Javascript in an onmouseover attribute in an e-mail address or URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1137 
Charles Steinkuehler sh-httpd 0.3 and 0.4 allows remote attackers to read files or execute arbitrary CGI scripts via a GET request that contains an asterisk (*) wildcard character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1138 
The default configuration of Apache 2.0.40, as shipped with Red Hat Linux 9.0, allows remote attackers to list directory contents, even if auto indexing is turned off and there is a default web page configured, via a GET request containing a double slash (//).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1139 
Musicqueue 1.2.0 allows local users to overwrite arbitrary files by triggering a segmentation fault and using a symlink attack on the resulting musicqueue.crash file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1140 
Buffer overflow in Musicqueue 1.2.0 allows local users to execute arbitrary code via a long language variable in the configuration file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1141 
Buffer overflow in NIPrint 4.10 allows remote attackers to execute arbitrary code via a long string to TCP port 515.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1142 
Help in NIPrint LPD-LPR Print Server 4.10 and earlier executes Windows Explorer with SYSTEM privileges, which allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1143 
Croteam Serious Sam demo test 2 2.1a, Serious Sam: the First Encounter 1.05, and Serious Sam: the Second Encounter 1.05 allow remote attackers to cause a denial of service (crash or freeze) via a TCP packet with an invalid first parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1144 
Buffer overflow in the log viewing interface in Perception LiteServe 1.25 through 2.2 allows remote attackers to execute arbitrary code via a GET request with a long file name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1145 
Cross-site scripting (XSS) vulnerability in friendmail.php in OpenAutoClassifieds 1.0 allows remote attackers to inject arbitrary web script or HTML via the listing parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1146 
Cross-site scripting (XSS) vulnerability in John Beatty Easy PHP Photo Album 1.0 allows remote attackers to inject arbitrary web script or HTML via the dir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1148 
Multiple PHP remote file inclusion vulnerabilities in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences (phpMyConference) 8.0.2 and possibly other products, allow remote attackers to execute arbitrary PHP code via a URL in the lvc_include_dir parameter to (1) config.inc.php or (2) new-visitor.inc.php in common/visiteurs/include/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1149 
Cross-site scripting (XSS) vulnerability in Symantec Norton Internet Security 2003 6.0.4.34 allows remote attackers to inject arbitrary web script or HTML via a URL to a blocked site, which is displayed on the blocked sites error page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1150 
Buffer overflow in the portmapper service (PMAP.NLM) in Novell NetWare 6 SP3 and ZenWorks for Desktops 3.2 SP2 through 4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1151 
Cross-site scripting (XSS) vulnerability in Fastream NETFile Server 6.0.3.588 allows remote attackers to inject arbitrary web script or HTML via the URL, which is displayed on a "404 Not Found" error page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1152 
WebTide 7.04 allows remote attackers to list arbitrary directories via an HTTP request for %3f.jsp (encoded "?").
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1153 
byteHoard 0.7 and 0.71 allows remote attackers to list arbitrary files and directories via a direct request to files.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1154 
MAILsweeper for SMTP 4.3 allows remote attackers to bypass virus protection via a mail message with a malformed zip attachment, as exploited by certain MIMAIL virus variants.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1155 
X-CD-Roast 0.98 alpha10 through alpha14 allows local users to overwrite arbitrary files via a symlink attack on an unknown file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1156 
Java Runtime Environment (JRE) and Software Development Kit (SDK) 1.4.2 through 1.4.2_02 allows local users to overwrite arbitrary files via a symlink attack on (1) unpack.log, as created by the unpack program, or (2) .mailcap1 and .mime.types1, as created by the RPM program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1157 
Cross-site scripting (XSS) vulnerability in login.asp in Citrix MetaFrame XP Server 1.0 allows remote attackers to inject arbitrary web script or HTML via the NFuse_Message parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1158 
Multiple buffer overflows in the FTP service in Plug and Play Web Server 1.0002c allow remote attackers to cause a denial of service (crash) via long (1) dir, (2) ls, (3) delete, (4) mkdir, (5) DELE, (6) RMD, or (7) MKD commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1159 
Plug and Play Web Server Proxy 1.0002c allows remote attackers to cause a denial of service (server crash) via an invalid URI in an HTTP GET request to TCP port 8080.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1160 
FlexWATCH Network video server 132 allows remote attackers to bypass authentication and gain administrative privileges via an HTTP request to aindex.htm that contains double leading slashes (//).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1161 
exit.c in Linux kernel 2.6-test9-CVS, as stored on kernel.bkbits.net, was modified to contain a backdoor, which could allow local users to elevate their privileges by passing __WCLONE|__WALL to the sys_wait4 function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1162 
index.php in Tritanium Bulletin Board 1.2.3 allows remote attackers to read and reply to arbitrary messages by modifying the thread_id, forum_id, and sid parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1163 
hash.c in Ganglia gmond 2.5.3 allows remote attackers to cause a denial of service (segmentation fault) via a UDP packet that contains a single-byte name string, which is used as an out-of-bounds array index.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1164 
Cross-site scripting (XSS) vulnerability in Mldonkey 2.5-4 allows remote attackers to inject arbitrary web script or HTML via the URI, which is injected into the HTML error page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1165 
Buffer overflow in BRS WebWeaver 1.06 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with a long User-Agent header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1166 
Directory traversal vulnerability in (1) Openfile.aspx and (2) Html.aspx in HTTP Commander 4.0 allows remote attackers to view arbitrary files via a .. (dot dot) in the file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1167 
misc.cpp in KPopup 0.9.1 trusts the PATH variable when executing killall, which allows local users to elevate their privileges by modifying the PATH variable to reference a malicious killall program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1168 
HTTP Commander 4.0 allows remote attackers to obtain sensitive information via an HTTP request that contains a . (dot) in the file parameter, which reveals the installation path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1169 
DATEV Nutzungskontrolle 2.1 and 2.2 has insecure write permissions for critical registry keys, which allows local users to bypass access restrictions by importing NukoInfo values in certain DATEV keys, which disables Nutzungskontrolle.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1170 
Format string vulnerability in main.cpp in kpopup 0.9.1 and 0.9.5pre2 allows local users to cause a denial of service (segmentation fault) and possibly execute arbitrary code via format string specifiers in command line arguments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1171 
Heap-based buffer overflow in the sec_filter_out function in mod_security 1.7RC1 through 1.7.1 in Apache 2 allows remote attackers to execute arbitrary code via a server side script that sends a large amount of data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1172 
Directory traversal vulnerability in the view-source sample file in Apache Software Foundation Cocoon 2.1 and 2.2 allows remote attackers to access arbitrary files via a .. (dot dot) in the filename parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2003-1173 
Centrinity FirstClass 7.1 allows remote attackers to access sensitive information by appending search to the end of the URL and checking all of the search option checkboxes and leaving the text field blank, which will return all files in the searched directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z