Directory traversal

HD-Network Real-time Monitoring System 2.0 allows ../ directory traversal to read /etc/shadow via the /language/lang sLanguage parameter...

PT-2021-24195

Name of the Vulnerable Software and Affected Versions: HD-Network Real-time Monitoring System version 2.0 Description: The issue allows for directory traversal, enabling access to sensitive files such as /etc/shadow. This is achieved through the s Language parameter in the /language/lang API...

CVE-2006-5326: Undefined Security Weakness

PHP remote file inclusion vulnerability in language/lang/langcontactfaq.php in the Prillian French 0.8.0 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter. NOTE: the provenance of this information is unknown; the details ar...