CVE-2008-3194

Multiple directory traversal vulnerabilities in data/inc/themes/predefinedvariables.php in pluck 4.5.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 langpref, 2 file, 3 blogpost, or 4 cat parameter...

CVE-2008-3194

Pluck CMS 4.5.1 contains directory traversal vulnerabilities in data/inc/themes/predefined_variables.php that allow remote attackers to include and execute local files via a .. in the langpref, file, blogpost, or cat parameters. This is triggered by the affected file path handling and is related ...

CVE-2007-3194

CVE-2007-3194 affects myBloggie 2.1.5. The issue is described as remote PHP file inclusion via a URL in bloggie_root_path to files including includes/config.php, includes/db.php, includes/template.php, includes/functions.php, includes/classes.php, viewmode.php, and blog_body.php. The root cause i...

CVE-2006-3194

Directory traversal vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot sequence and trailing null %00 byte in the 1 gallery and 2 template parameter...

CVE-2006-3194

CVE-2006-3194 affects the Singapore project up to version 0.10.0 and earlier. A directory traversal flaw in index.php allows remote attackers to read arbitrary files by injecting a .. sequence and a trailing null (%00) byte into the (1) gallery or (2) template parameters. The vulnerability enable...

CVE-2005-3194

CVE-2005-3194 affects ALZip 6.12 (Korean), 6.1 (International), and 5.52 (English). The vulnerability is described as multiple buffer overflows that allow remote attackers to execute arbitrary code via a long filename inside compressed archives (ALZ, ARJ, ZIP, UUE, XXE). Connected sources reitera...