85 matches found
Remote file inclusion
PHP remote file inclusion vulnerability in ListRecords.php in osprey 1.0a4.1 allows remote attackers to execute arbitrary PHP code via a URL in the xmldir parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: the libdir...
CVE-2008-6807
PHP remote file inclusion vulnerability in ListRecords.php in osprey 1.0a4.1 allows remote attackers to execute arbitrary PHP code via a URL in the xmldir parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: the libdir...
CVE-2008-6630
The CVE-2008-6630 entry describes a directory traversal vulnerability in the TYPO3 wt_gallery extension (versions 2.5.0 and earlier). Affected component: wt_gallery (TYPO3). Root cause: improper handling of file paths allows remote attackers to read arbitrary image files and map directory structu...
CVE-2008-6630
Directory traversal vulnerability in the wtgallery extension 2.5.0 and earlier for TYPO3 allows remote attackers to read arbitrary image files and determine directory structure via unspecified vectors...
CVE-2007-6630
The CVE-2007-6630 entry describes a vulnerability in Netembryo 0.0.4 where the Url_init function in utils/url.c processes a malformed URI containing a "/:" sequence. This can allow remote attackers to trigger a NULL dereference and a daemon crash (denial of service) as demonstrated by a request l...