CollabNet Subversion Edge tail local file inclusion

Vuln Title: Local file inclusion in CollabNet Subversion Edge Management Frontend via logfile "fileName" parameter of the "tail" action Date: 28.06.2015 Author: otr Software Link: https://www.open.collab.net/downloads/svnedge Vendor: CollabNet Version: 4.0.11 Tested on: Fedora Linux Type: Local...

CollabNet Subversion Edge downloadHook local file inclusion

Vuln Title: Local file inclusion in CollabNet Subversion Edge Management Frontend via logfile "filename" parameter of the "downloadHook" action Date: 28.06.2015 Author: otr Software Link: https://www.open.collab.net/downloads/svnedge Vendor: CollabNet Version: 4.0.11 Tested on: Fedora Linux Type:...

CVE-2015-5353: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Novius OS 5.0.1 Elche allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tab parameter to admin/...

CVE-2015-4415: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in func.php in Magnifica Webscripts Anima Gallery 2.6 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 theme or 2 lang cookie parameter to AnimaGallery/...

CVE-2015-3648: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in pages/setup.php in Montala Limited ResourceSpace before 7.2.6727 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the defaultlanguage parameter...

CVE-2015-0846

django-markupfield before 1.3.2 uses the default docutils RESTRUCTUREDTEXTFILTERSETTINGS settings, which allows remote attackers to include and read arbitrary files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in inc/autoload.function.php in GLPI before 0.84.8 allows remote attackers to include and execute arbitrary local files via a .. dot dot underscore in an item type to the getItemForItemtype, as demonstrated by the itemtype parameter in ajax/common.tabs.php...

CVE-2014-8084: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in oc-includes/osclass/controller/ajax.php in OSClass before 3.4.3 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the ajaxfile parameter in a custom action...

CVE-2013-3295: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in install/popup.php in Exponent CMS before 2.2.0 RC1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

PHP-Calendar 0.10.1 - Arbitrary File Inclusion

PHP-Calendar 0.10.1 - Arbitrary File Inclusion PHP-Calendar Arbitrary File Inclusion Vendor: Sean Proctor Product: PHP-Calendar Version: = 0.10.1 Website: http://php-calendar.sourceforge.net/ BID: 12127 CVE: CVE-2004-1423 OSVDB: 12700 12701 SECUNIA: 22516 PACKETSTORM: 35563 Description: I was...

CVE-2014-8959: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in libraries/gis/GISFactory.class.php in the GIS editor in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x before 4.1.14.7, and 4.2.x before 4.2.12 allows remote authenticated users to include and execute arbitrary local files via a crafted geometry-type parameter...

phpMyAdmin 4.0.x < 4.0.10.6 / 4.1.x < 4.1.14.7 / 4.2.x < 4.2.12 Multiple Vulnerabilities (PMASA-2014-13 through 16)

Binary data 8583.prm...

CVE-2014-7985: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in EspoCRM before 2.6.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter to install/index.php...

phpldapadmin 0.9.6/0.9.7 welcome.php custom_welcome_page Variable Arbitrary File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/14695/info phpldapadmin is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. phpldapadmin is prone to a directory traversal...

Root Exploit Western Digital's WD TV Live SMP/Hub

No description provided by source. Introduction ============ The WD TV Live Streaming Media Player is a consumer device to play various audio and video formats. Additionally it allows access to multiple video streaming services like Netflix, Hulu or Youtube.1 The device allows customization of it...

PHPSysInfo 2.x Multiple Input Validation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/15396/info phpSysInfo is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. phpSysInfo is prone to cross-site scripting, HTTP...

nodez <= 4.6.1.1 mercury Multiple Vulnerabilities

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Nodez 4.6.1.1 Mercury possibly prior versions multiple vulnerabilities\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; / software: site: nodez.greentinted.com/ description:...

OrangeHRM 2.6.3 (PluginController.php) Local File Inclusion Vulnerability

No description provided by source. ------------------------------------------------------------------------ Software................OrangeHRM 2.6.3 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.orangehrm.com/ Discovery...

N/X Web Content Management System 2002 Prerelease 1 menu.inc.php c_path Parameter RFI

No description provided by source. source: http://www.securityfocus.com/bid/6500/info N/X Web Content Management System is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers. An attacker may exploit this by supplying a path to a maliciously...

EasySiteEdit Remote File Inclusion Vulnerability

No description provided by source. Exploit Title: EasySiteEdit remote file include Date:2011 Author:koskesh jakesh Software Link: http://www.easysiteedit.com/licensesystem/esev2versions/esev2.zip Tested on: linux ------------------------------- vul:sublink.php line 20: include$REQUEST'langval';...