PT-2011-1802

Name of the Vulnerable Software and Affected Versions W-Agora versions 4.2.1 and earlier Description A directory traversal issue exists, allowing remote attackers to include and execute arbitrary local files. This is achieved by providing a .. dot dot in the bn parameter of the search.php3 also...

CVE-2010-4867: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in search.php3 aka search.php in W-Agora 4.2.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the bn parameter...

Multiple vulnerabilities in MantisBT

Vulnerability ID: HTB23045 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinmantisbt.html Product: MantisBT Vendor: www.mantisbt.org http://www.mantisbt.org/ Vulnerable Version: 1.2.7 and probably prior Tested Version: 1.2.7 Vendor Notification: 31 August 2011 Vulnerability...

[oCERT-2011-001] Chyrp input sanitization errors

2011-001 Chyrp input sanitization errors Description: The Chyrp framework, an open source blogging engine, suffers from cross-site scripting XSS and local file inclusion LFI vulnerabilities. Insufficient input sanitization on the parameters passed to pages related to administration settings, the...

i-doIT 0.9.9-4 LFI Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................i-doIT 0.9.9-4 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.i-doit.org/...

CVE-2010-4801: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin/updatelist.php in BaconMap 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the filepath parameter...

CVE-2010-4798: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in OrangeHRM 2.6.0.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the uri parameter...

Course MS 2.1 Local File Inclusion

------------------------------------------------------------------------ Software................Course MS 2.1 Vulnerability...........Local File Inclusion Download................http://sourceforge.net/projects/coursems Release Date............2/14/2011 Tested On...............Windows Vista +...

CVE-2011-0518: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in core/lib/router.php in LotusCMS Fraise 3.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via the system parameter to index.php...

PT-2011-2404

Name of the Vulnerable Software and Affected Versions Zwii version 2.1.1 Description A directory traversal issue exists when magic quotes gpc is disabled and register globals is enabled, allowing remote attackers to include and execute arbitrary local files via directory traversal sequences in th...

CVE-2010-4613: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Hycus CMS 1.0.3 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the site parameter to 1 index.php and 2 admin.php...

BaconMap v1.0 Local File Disclosure Vulnerability

Exploit for php platform in category web applications ================================================= BaconMap v1.0 Local File Disclosure Vulnerability ================================================= Software................BaconMap 1.0 Vulnerability...........Local File Inclusion...

BaconMap 1.0 - Local File Disclosure

BaconMap 1.0 - Local File Disclosure ------------------------------------------------------------------------ Software................BaconMap 1.0 Vulnerability...........Local File Inclusion Download................http://baconmap.nmsu.edu/ Release Date............10/10/2010 Tested...

CVE-2010-2797

Directory traversal vulnerability in lib/translation.functions.php in CMS Made Simple before 1.8.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the defaultcmslang parameter to an admin script, as demonstrated by admin/addbookmark.php, a different...

CVE-2010-3688: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in ADMIN/login.php in NetArtMEDIA WebSiteAdmin allows remote emote attackers to include and execute arbitrary local files via directory traversal sequences in the lng parameter...

CVE-2010-3606: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in AGENTS/index.php in NetArt MEDIA Real Estate Portal 2.0 allow remote emote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 folder and 2 action parameters...

CVE-2010-3426: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in jphone.php in the JPhone comjphone component 1.0 Alpha 3 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...

CVE-2010-2850: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in productionnu2/fileuploader.php in nuBuilder 10.04.20, and possibly other versions before 10.07.12, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the dir parameter...

CVE-2009-4946: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Messaging commessaging component before 1.5.1 for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the controller parameter in a messages action to index.php. NOTE: the provenance of this...

CVE-2010-2680: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the JExtensions JE Section/Property Finder jesectionfinder component for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the view parameter to index.php...