CVE-2008-5819: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in eDNewsarchive.php in eDreamers eDNews 2, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lg parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-5776

CVE-2008-5776 affects Aperto Blog 0.1.1. The vulnerability is a directory traversal in the (1) action parameter to admin.php and (2) get parameter to index.php, enabling remote attackers to include and execute arbitrary local files. In some environments, this can be leveraged for remote file incl...

CVE-2008-5771: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter...

CVE-2008-5728

CVE-2008-5728 affects AIST NetCat 3.12 and earlier. Multiple directory traversal vulnerabilities allow remote attackers to include and execute arbitrary local files via a .. in the system parameter of modules/netshop/post.php and the INCLUDE_FOLDER parameter in modules/auth.inc.php, modules/banne...

CVE-2008-5594: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in index.php in Mini Blog 1.0.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 page and 2 admin parameters...

CVE-2008-5570: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in PHP Multiple Newsletters 2.7, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

CVE-2008-5418: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in login.php in the PunPortal module before 2.0 for PunBB allows remote attackers to include and execute arbitrary local files via a .. dot dot in the punuserlanguage parameter...

CVE-2008-5265: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in TNT Forum 0.9.4, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the modulo parameter...

CVE-2008-5217

Vulnerability context (CVE-2008-5217) : A directory traversal flaw affects the PHP-based CMS txtCMS 0.3 in index.php when PHP is configured with register_globals enabled and magic_quotes_gpc disabled. An attacker can manipulate the id parameter with a .. sequence to cause local file inclusion and...

CVE-2008-5217: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in txtCMS 0.3, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the id parameter...

CVE-2008-5204: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in PowerAward 1.1.0 RC1, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the lang parameter to 1 agb.php, 2 angemeldet.php, 3 anmelden.php, 4 charts.php, 5...

CVE-2008-5171: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in admin/minibb/index.php in phpBLASTER CMS 1.0 RC1, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 DB, 2 lang, and 3 skin parameters...

CVE-2008-4780: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin/centre.php in MyForum 1.3, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the padmin parameter...

CVE-2008-4740: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in templater.php in the ZZTemplater module in TinyCMS 1.1.2, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the configtemplate parameter...

CVE-2008-4712: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in pages/showblog.php in LnBlog 0.9.0 and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the plugin parameter...

CVE-2008-4667: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in rss.php in ArabCMS 2.0 beta 1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the rss parameter...

CVE-2008-4668: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Image Browser comimagebrowser 0.1.5 component for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the folder parameter to index.php...

CVE-2008-4626: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Fritz Berger yet another php photo album - next generation yappa-ng 2.3.2 and possibly other versions through 2.3.3-beta0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in th...

CVE-2008-4522: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in JMweb MP3 Music Audio Search and Download Script allow remote attackers to include and execute arbitrary local files via a .. dot dot in the src parameter to 1 listen.php and 2 download.php...

CVE-2008-4490: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in config.inc.php in phpAbook 0.8.8b and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the userInfo cookie...