CVE-2008-6877: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin/includes/initsystem.php in Zen Cart 1.3.8 and 1.3.8a, when .htaccess is not supported, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the loaderfile parameter. NOTE: the vendor disputes this issue, stating "at...

CVE-2009-2611: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in infusions/lastseenuserspanel/lastseenuserspanel.php in MyFusion aka MyF 6 Beta, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the settingslocale parameter...

CVE-2008-6842: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in data/modules/blog/modulepagessite.php in Pluck 4.6.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the post parameter...

CVE-2009-2313: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Jinzora Media Jukebox 2.8 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the name parameter...

CVE-2009-2176: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in fuzzylime cms 3.03a and earlier, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 list parameter to code/confirm.php and the 2 template parameter to...

CVE-2009-2161: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic 1.09, when used on a case-insensitive web site, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the ssuri parameter, in conjunction with a modified component name...

CVE-2009-2132: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in global.php in 4images before 1.7.7, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the l parameter...

CVE-2009-2112: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in include/pagebottom.php in phpFK 7.03 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the FORUMsettingsdesignstyle parameter...

CVE-2009-2037: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Online Grades & Attendance 3.2.5 and earlier, and possibly 3.2.6, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 GLOBALSSKIN parameter to index.php and the 2 skin...

cpCommerce 1.2.x GLOBALS[prefix] Arbitrary File Inclusion Exploit

Exploit for unknown platform in category web applications ================================================================= cpCommerce 1.2.x GLOBALSprefix Arbitrary File Inclusion Exploit ================================================================= !/usr/bin/perl cpCommerce 1.2.x GLOBALSpref...

CPCommerce 1.2.x - GLOBALS[prefix] Arbitrary File Inclusion

CPCommerce 1.2.x - GLOBALSprefix Arbitrary File Inclusion !/usr/bin/perl cpCommerce 1.2.x GLOBALSprefix Arbitrary File Inclusion Exploit by staker mail: stakerathotmaildotit url: http://cpcommerce.cpradio.org it works with registerglobals=on if you wanna carry out a LFI - mq=off short explanation...

CPCommerce 1.2.x - 'GLOBALS[prefix]' Arbitrary File Inclusion

!/usr/bin/perl cpCommerce 1.2.x GLOBALSprefix Arbitrary File Inclusion Exploit by staker mail: stakerathotmaildotit url: http://cpcommerce.cpradio.org it works with registerglobals=on if you wanna carry out a LFI - mq=off short explanation: cpCommerce contains one flaw that allows an attacker to...

TinyWebGallery <= 1.7.6 LFI / Remote Code Execution Exploit

No description provided by source. ?php / ----------------------------------------------------------- TinyWebGallery = 1.7.6 LFI / Remote Code Execution Exploit ----------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...

CVE-2009-1498: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in inc/profilemain.php in Game Maker 2k Internet Discussion Boards iDB 0.2.5 Pre-Alpha SVN 243 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the skin parameter in a settings action to profile.php...

CVE-2009-1406: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in cmsdetect.php in TotalCalendar 2.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the include parameter...

CVE-2009-1318: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter...

CVE-2009-1246: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Blogplus 1.0 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 rowmysqlblockscenterdownfile parameter to includes/blockcenterdown.php; 2 rowmysqlblockscentertopfile includes/parameter to blockcentertop.php...

CVE-2008-6604: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in PicoFlat CMS 0.5.9 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pagina parameter, a different vulnerability than CVE-2007-5390...

CVE-2008-6551: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in e-Vision CMS 2.0.2 and earlier, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 an adminlang cookie to admin/index.php; or the module parameter to 2...

CVE-2008-6516: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in phpKF-Portal 1.10 allow remote attackers to include arbitrary files via a .. dot dot in the 1 temadizin parameter to baslik.php and 2 portalayarlarportaldili parameter to anketyonetim.php. NOTE: the provenance of this information is unknown; the...