Directory traversal

Directory traversal vulnerability in addressbook.php in the Addressbook 1.2 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. dot dot in the modulename parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file...

CVE-2007-1720: Undefined Security Weakness

Directory traversal vulnerability in addressbook.php in the Addressbook 1.2 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. dot dot in the modulename parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file...

CVE-2007-1720

CVE-2007-1720 affects the Addressbook 1.2 module for PHP-Nuke. Vulnerability: directory traversal via .. in the module_name parameter allows remote attackers to include and execute arbitrary local files, demonstrated by injecting PHP sequences into an Apache log file. Public exploits are listed (...

CVE-2005-4164

CVE-2005-4164 is a SQL injection vulnerability in the view.php component of PHP-addressbook 1.2. An attacker can submit a crafted id parameter to remote-execute arbitrary SQL commands, with impact described as partial confidentiality, integrity, and availability. The NVD entry lists a base score ...