CVE-2008-6334

Directory traversal vulnerability in download.php in eMetrix Extract Website allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

CVE-2008-6336

CVE-2008-6336 affects the Text Lines Rearrange Script 1.0 and is a directory traversal vulnerability in download.php. When register_globals is enabled, an attacker can read arbitrary local files by supplying directory traversal sequences in the filename parameter. The connected documents corrobor...

CVE-2008-6334: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in download.php in eMetrix Extract Website allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

CVE-2008-6336: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in download.php in Text Lines Rearrange Script 1.0, when registerglobals is enabled, allows remote attackers to read arbitrary local files via directory traversal sequences in the filename parameter...

CVE-2008-6335: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in download.php in eMetrix Online Keyword Research Tool allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

CVE-2008-6288

Directory traversal vulnerability in download.php in Interface Medien ibase 2.03 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

CVE-2008-6288: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in download.php in Interface Medien ibase 2.03 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 page and 2 query parameters to a index.php, 3 cat and 4 file parameters to b download.php, 5 gal parameter to gallery.php, and the 6 URL to...

CVE-2008-6127

Multiple cross-site scripting XSS vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 page and 2 query parameters to a index.php, 3 cat and 4 file parameters to b download.php, 5 gal parameter to gallery.php, and the 6 URL to...

CVE-2008-6127

CVE-2008-6127 affects moziloCMS

CVE-2008-6126: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the 1 file parameter to download.php and the 2 page parameter to index.php, a different vector than CVE-2008-3589...

CVE-2008-6127: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 page and 2 query parameters to a index.php, 3 cat and 4 file parameters to b download.php, 5 gal parameter to gallery.php, and the 6 URL to...

CVE-2008-6080: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in download.php in the ionFiles comionfiles 4.4.2 component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2008-6084: Improper Input Validation

Unrestricted file upload vulnerability in pages/download.php in Iamma Simple Gallery 1.0 and 2.0 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads directory...

CVE-2008-5766

CVE-2008-5766 describes an SQL injection vulnerability in the download.php endpoint of the Farsi Script Faupload application, exploitable via the troubled id parameter to run arbitrary SQL commands. Root cause: unsafely constructed SQL queries that incorporate user input without adequate sanitiza...

CVE-2008-5766: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in download.php in Farsi Script Faupload allows remote attackers to execute arbitrary SQL commands via the id parameter...

Text Lines Rearrange Script - 'Filename' File Disclosure

Text Lines Rearrange Script download.php filename File Disclosure Vulnerability + Discovered By SirGod + Visit : www.h4cky0u.org + Greetz : All my friends + File Disclosure Vulnerability Vulnerable Code in download.php : ----------------------------------------------------- iffileexists$filename...

Extract Website (download.php filename) File Disclosure Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Extract Website download.php filename File Disclosure Vulnerability ===================================================================== Extract Website download.php...

Online Keyword Research Tool (download.php) File Disclosure Vuln

Exploit for unknown platform in category web applications ================================================================ Online Keyword Research Tool download.php File Disclosure Vuln ================================================================ Online Keyword Research download.php filename...

Online Keyword Research Tool - 'download.php' File Disclosure

Online Keyword Research download.php filename Local File Include author : Cold z3ro, http://www.hackteach.org/ script : http://secure.emetrix.com/order/product.asp?PID=68900247 demo : http://www.rightscripts.com/keywordresearch/ Exploit...