CVE-2009-0932: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in framework/Image/Image.php in Horde before 3.2.4 and 3.3.3 and Horde Groupware before 1.1.5 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the HordeImage driver name...

CVE-2008-6407: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the framefile parameter...

CVE-2008-6361: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in InSun Feed CMS 1.7.3 19Beta allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the lang parameter...

CVE-2008-6316: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in conf/core/common-tpl-vars.php in PHPmyGallery 1.0 beta2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter, a different issue than CVE-2008-6316 and a different vector than CVE-2008-6318...

CVE-2008-6290: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in includefile.php in nicLOR Sito, when registerglobals is enabled or magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary files via a .. dot dot in the pagefile parameter...

CVE-2009-0729: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Page Engine CMS 2.0 Basic and Pro allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the fPrefix parameter to 1 modules/recentpollinclude.php, 2 modules/logininclude.php, and 3...

CVE-2008-6265: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in portfolio/css.php in Cyberfolio 7.12.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the theme parameter...

CVE-2009-0731: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in pages/play.php in Free Arcade Script 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the template parameter...

CVE-2008-6177: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in LightBlog 9.8, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 username parameter to viewmember.php, 2 usernamepost parameter to login.php, and the 3 Lightblogusername...

CVE-2008-6172: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in captcha/captchaimage.php in the RWCards comrwcards 3.0.11 component for Joomla!, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the img parameter...

CVE-2009-0596: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in skysilver/login.tpl.php in phpSkelSite 1.4, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the TplSuffix parameter...

CVE-2009-0570: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in send.php in Ninja Designs Mailist 3.0, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the load parameter. NOTE: some of these details are obtained from...

CVE-2009-0514: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in WebFrame 0.76 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 currentmod and 2 LANG parameters to mod/index.php...

CVE-2008-6083: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in header.php in TXTshop beta 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

CVE-2009-0442: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in bbcode.php in PHPbbBook 1.3 and 1.3h allows remote attackers to include and execute arbitrary local files via a .. dot dot in the l parameter...

CVE-2009-0422: Improper Control of Generation of Code

Dynamic variable evaluation vulnerability in lists/admin.php in phpList 2.10.8 and earlier, when registerglobals is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the SERVERConfigFile parameter to admin/index.php...

CVE-2008-5993: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in image.php in Barcode Generator 1D barcodegen 2.0.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the code parameter...

CVE-2009-0291

OpenX 2.6.3 is affected by a Local File Inclusion in fc.php via the MAX_type parameter. The issue arises because the MAX_type input is used in a PHP include() without proper validation, enabling an unauthenticated attacker to view arbitrary files or potentially execute PHP code under the web serv...

CVE-2008-5948

CVE-2008-5948 concerns a directory traversal vulnerability in index.php of BNCwi version 1.04 and earlier. The issue arises when processing the newlanguage parameter, where an attacker can inject a .. path segment to cause local files to be included and (potentially) executed. Impact is partial c...

CVE-2008-5943: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in NavBoard 16 2.6.0 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the module parameter to 1 adminmodules.php and 2 modules.php...