phpNagios 'conf[lang]' Parameter LFI Vulnerability

phpNagios is prone to a local file include LFI vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-4626

Directory traversal vulnerability in menu.php in phpNagios 1.2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the conflang parameter...

Joomla Component com_prime Directory Traversal

Exploit for unknown platform in category web applications ============================================== Joomla Component comprime Directory Traversal ============================================== @email protected @=Script : Joomla Component comprime @=Author : FL0RiX @=Bug Type : Directory...

Gentoo Security Advisory GLSA 201001-03 (php)

The remote host is missing updates announced in advisory GLSA 201001-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Cross site scripting

Cross-site scripting XSS vulnerability in newticket.php in IsolSoft Support Center 2.5 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2009-4541

Multiple PHP remote file inclusion vulnerabilities in IsolSoft Support Center 2.5 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to 1 newticket.php or 2 rempass.php, or a URL in the lang parameter in an adduser action to 3 index.php. NOTE: this can also be...

CVE-2009-4542: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in newticket.php in IsolSoft Support Center 2.5 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

Improper access control

DeluxeBB 1.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain user and configuration information, log data, and gain administrative access via a direct request to scripts in 1 templates/ including 2 templates/deluxe/admincp/...

DeluxeBB 1.3 - Multiple Vulnerabilities

DeluxeBB 1.3 - Multiple Vulnerabilities Author: cp77fk4r | Empty0pagEShift+2gmail.com Vendor: http://www.deluxebb.com Directory Listing http://server/templates/ http://server/images/ http://server/logs/ http://server/wysiwyg/ http://server/docs/ http://server/classes http://server/lang...

Real Estate Manager 1.0.1 XSS

Title: Real Estate Manager 1.0.1 - XSS /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111 ---------------------------------------------------------------- + Real Estate Manager 1.0.1 - XSS // Author Info x Author: bi0 x Contact: [email protected] x Homepage...

CVE-2009-4318: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Real Estate Manager 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the lang parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-4216: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in funzioni/lib/menulast.php in klinza professional cms 5.0.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the LANG parameter...

SLES11: Security update for glib2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: glib2 glib2-doc glib2-lang libgio-20-0 libglib-20-0 libgmodule-20-0 libgobject-20-0 libgthread-20-0 More details may also be found by searching for the SuSE...

SuSE 11 Security Update : Epiphany (SAT Patch Number 1342)

This update fixes a regression with the epiphany browser which did not work with the newer Mozilla XULRunner 1.9.1 engine. Epiphany now explicitly uses the old 1.9.0 engine again. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2008-7064: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the getlang function in global.php in Quicksilver Forums 1.4.2 and earlier, as used in QSF Portal before 1.4.5, when running on Windows, allows remote attackers to include and execute arbitrary local files via a "" backslash in the lang parameter to index.php,...

MiniCWB 2.3.0 - 'lang' Remote File Inclusion

================================================================================================ o MiniCWB 2.3.0 Multiple Remote File Inclusion Vulnerability Software : MiniCWB version 2.3.0 Vendor : http://www.grafxsoftware.com/ Download :...

CVE-2009-2449

Directory traversal vulnerability in maillinglist/admin/changeconfig.php in ADbNewsSender before 1.5.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pathtolang parameter...

Directory traversal

Multiple directory traversal vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to 1 read portions of arbitrary files via a .. dot dot and a ..\ dot dot backslash in the lang parameter to main/exercice/hotspotlangconversion.php and 2 read arbitrary files via a .. dot do...

Coppermine Photo Gallery 'lang' Cookie参数本地文件包含漏洞

Bugraq ID: 30480 CNCAN ID：CNCAN-2009052002 Coppermine Photo Gallery是一款基于WEB的图库程序。 Coppermine Photo Gallery不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限查看系统文件内容。 在用于包含文件钱传递给"GLOBALSUSERlang"的参数不正确过滤，可导致提交特殊请求以WEB权限查看系统文件内容。 Coppermine Photo Gallery 1.4.22 Coppermine Photo Gallery 1.4.21 Coppermine Photo Gallery...

CVE-2009-1445: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in WebPortal CMS 0.8-beta allow remote attackers to 1 read arbitrary files via directory traversal sequences in the lang parameter to libraries/helpdocs/help.php and 2 include and execute arbitrary local files via directory traversal sequences in the...