CVE-2010-1653

Directory traversal vulnerability in graphics.php in the Graphics comgraphics component 1.0.6 and 1.5.0 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php. NOTE: some of these details are obtained from third...

CVE-2010-1653

The CVE-2010-1653 entry describes a directory traversal (LFI) in Joomla!’s Graphics (com_graphics) component, specifically in graphics.php for versions 1.0.6 and 1.5.0. The vulnerability allows remote attackers to include and execute arbitrary local files by supplying a .. (dot dot) in the contro...

CVE-2009-1653

CVE-2009-1653 concerns TinyButStrong 3.4.0. The vulnerability is a directory traversal in examples/tbs_us_examples_0view.php, where user-supplied script parameter can include .. to read arbitrary files. Impact is reading restricted files; no other impacts are described in the provided documents. ...

CVE-2009-1653

creationtimestamp| type| source ---|---|--- 2009-05-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8667...

CVE-2008-1653

CVE-2008-1653 describes a directory traversal vulnerability in the web app Sava’s Link Manager 2.0 . The flaw occurs in index.php , allowing remote attackers to include and execute arbitrary local files by manipulating the q parameter (directory traversal sequences). This is consistently reported...

CVE-2007-1653

Affected product: GlowWorm FW. Vulnerable component/function: DNS packet parsing in TrueDNS. Root cause: DNS responses triggering infinite recursion leading to a kernel panic. Impact: Denial of service via remote attackers over network. Observed with certain responses (e.g., login.yahoo.com); no ...

CVE-2005-1653

Woppoware PostMaster 4.2.2 (build 3.2.5) is affected by a Cross-site Scripting (XSS) vulnerability in the message.htm page due to unsanitized input in the email parameter. This allows remote attackers to inject arbitrary web script or HTML. Root cause: improper input sanitization in the email par...

CVE-2004-1653

CVE-2004-1653 concerns OpenSSH’s default setting that enables AllowTcpForwarding. The description states that with an anonymous access program such as AnonCVS, remote authenticated users could perform a port bounce, effectively using the SSH server as a proxy to reach internal services. The vulne...