CVE-2010-0680: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in ZeusCMS 0.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter...

CVE-2009-4592: Undefined Security Weakness

Unspecified vulnerability in baselocalrules.php in Basic Analysis and Security Engine BASE before 1.4.4 allows remote attackers to include arbitrary local files via unknown vectors...

CVE-2009-4581: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in modules/admincp.php in RoseOnlineCMS 3 B1 and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the admin parameter...

CVE-2010-0157: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Bible Study combiblestudy component 6.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter in a studieslist action to index.php...

CVE-2009-4512: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Oscailt 3.3, when Use Friendly URL's is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the objid parameter...

CVE-2009-4426: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Ignition 1.2, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the blog parameter to 1 comment.php and 2 view.php...

CVE-2009-4435: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in F3Site 2009 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the GLOBALSnlang parameter to 1 mod/poll.php and 2 mod/new.php...

CVE-2009-4415: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in phpGroupWare 0.9.16.12, and possibly other versions before 0.9.16.014, allow remote attackers to 1 read arbitrary files via the csvfile parameter to addressbook/csvimport.php, or 2 include and execute arbitrary local files via the convtype parameter...

CVE-2009-4216: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in funzioni/lib/menulast.php in klinza professional cms 5.0.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the LANG parameter...

CVE-2009-4202: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Omilen Photo Gallery comomphotogallery component Beta 0.5 for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the controller parameter to index.php...

CVE-2009-3824: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in include/processor.php in Greenwood PHP Content Manager 0.3.2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the contentpath parameter...

CVE-2009-3507: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in modules.php in CMSphp 0.21 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the modfile parameter...

CVE-2009-3219: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in a.php in AR Web Content Manager AWCM 2.1, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the a parameter...

CVE-2009-3064: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in debugger/debugphp.php in Ve-EDIT 0.1.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the GETfilename parameter...

CVE-2009-3053: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Agora comagora component 3.0.0b for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action parameter to the avatars page, reachable through index.php...

CVE-2008-7090: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Pligg 9.9 and earlier allow remote attackers to 1 determine the existence of arbitrary files via a .. dot dot in the $tburl variable in trackback.php, or 2 include arbitrary files via a .. dot dot in the template parameter to settemplate.php...

CVE-2008-7055: Improper Limitation of a Pathname to a Restricted Directory

module.php in ezContents 2.0.3 allows remote attackers to bypass the directory traversal protection mechanism to include and execute arbitrary local files via "....//" doubled dot dot slash sequences in the link parameter, which is not properly filtered using the strreplace function...

CVE-2009-2792: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in plugings/pagecontent.php in Really Simple CMS RSCMS 0.3a allows remote attackers to include and execute arbitrary local files via a .. dot dot in the PT parameter...

CVE-2009-2787: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in include/reputation/repprofile.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the...

CVE-2008-6884: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in XOOPS 2.3.1, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the xoopsConfiglanguage parameter to 1 blocks.php and 2 main.php in xoopslib/modules/protector/...