CVE-2008-5883

Absolute path traversal vulnerability in front-end/dir.php in mini-pub 0.3 and earlier allows remote attackers to list arbitrary directories via a full pathname in the sDir parameter...

Path traversal

Absolute path traversal vulnerability in front-end/dir.php in mini-pub 0.3 and earlier allows remote attackers to list arbitrary directories via a full pathname in the sDir parameter...

CVE-2008-5883

Absolute path traversal vulnerability in front-end/dir.php in mini-pub 0.3 and earlier allows remote attackers to list arbitrary directories via a full pathname in the sDir parameter...

CVE-2008-5598

Directory traversal vulnerability in index.php in PHPmyGallery 1.51 gold allows remote attackers to list arbitrary directories via a .. dot dot in the group parameter...

Directory traversal

Directory traversal vulnerability in index.php in PHPmyGallery 1.51 gold allows remote attackers to list arbitrary directories via a .. dot dot in the group parameter...

Directory traversal

Multiple directory traversal vulnerabilities in Content Management Made Easy CMME 1.12 allow remote attackers to 1 read arbitrary files via a .. dot dot in the env parameter in a weblog action to index.php, or 2 create arbitrary directories via a .. dot dot in the env parameter in a login action ...

CVE-2008-3926

Multiple directory traversal vulnerabilities in Content Management Made Easy CMME 1.12 allow remote attackers to 1 read arbitrary files via a .. dot dot in the env parameter in a weblog action to index.php, or 2 create arbitrary directories via a .. dot dot in the env parameter in a login action ...

Path traversal

Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer ESC 2.6 allow remote attackers to create or delete arbitrary directories via a full pathname in the inpCurrFolder parameter to 1 folderdel.asp or 2 foldernew.asp in cms/assetmanager/...

CVE-2008-2863

Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer ESC 2.6 allow remote attackers to create or delete arbitrary directories via a full pathname in the inpCurrFolder parameter to 1 folderdel.asp or 2 foldernew.asp in cms/assetmanager/...

CVE-2008-2863

Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer ESC 2.6 allow remote attackers to create or delete arbitrary directories via a full pathname in the inpCurrFolder parameter to 1 folderdel.asp or 2 foldernew.asp in cms/assetmanager/...

Directory traversal

Directory traversal vulnerability in RTEfilebrowser.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\ in the sub parameter in a save action...

CVE-2008-0480

Multiple directory traversal vulnerabilities in Web Wiz Forums 9.07 and earlier allow remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\ in the sub parameter to 1 RTEfilebrowser.asp or 2 filebrowser.asp...

Directory traversal

Multiple directory traversal vulnerabilities in Web Wiz Forums 9.07 and earlier allow remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\ in the sub parameter to 1 RTEfilebrowser.asp or 2 filebrowser.asp...

Directory traversal

Directory traversal vulnerability in RTEfilebrowser.asp in Web Wiz NewsPad 1.02 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\ in the sub parameter...

CVE-2008-0479

Directory traversal vulnerability in RTEfilebrowser.asp in Web Wiz NewsPad 1.02 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\ in the sub parameter...

Directory traversal

Multiple directory traversal vulnerabilities in HTTP File Server HFS before 2.2c, when account names are used as log filenames, allow remote attackers to create arbitrary 1 files and 2 directories via a .. dot dot in an account name, when requesting the / URI; and 3 append arbitrary data to a fil...

CVE-2008-0405

Multiple directory traversal vulnerabilities in HTTP File Server HFS before 2.2c, when account names are used as log filenames, allow remote attackers to create arbitrary 1 files and 2 directories via a .. dot dot in an account name, when requesting the / URI; and 3 append arbitrary data to a fil...

Path traversal

Absolute path traversal vulnerability in explorerdir.php in Frimousse 0.0.2 allows remote attackers to read arbitrary files and list arbitrary directories via a full pathname in the name parameter...

CVE-2008-0425

Absolute path traversal vulnerability in explorerdir.php in Frimousse 0.0.2 allows remote attackers to read arbitrary files and list arbitrary directories via a full pathname in the name parameter...

CVE-2008-0425

CVE-2008-0425 affects Frimousse 0.0.2, in explorerdir.php, via an absolute path traversal in the name parameter. This allows remote attackers to read arbitrary files and list directories. Public exploits are referenced (e.g., Exploit-DB link 4943). The provided documents do not include a remediat...