CVE-2008-4489: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in ap-save.php in Atarone CMS 1.2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the themechosen parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...

CVE-2008-4499: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in PHP Web Explorer 0.99b and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 refer parameter to main.php and the 2 file parameter to edit.php...

CVE-2008-4486: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in SAC.php SACphp, as used in Yerba 6.3 and earlier, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mod parameter...

phpCMS 1.2.x任意文件包含漏洞

phpCMS是灵活、高效的内容管理系统。 phpCMS中存在服务器端任意文件包含漏洞，起因是在进行会话检查前调用了include语句。远程攻击者可以未经认证利用这个漏洞执行任意代码。 有漏洞的include调用位于class.layoutphpcms.php中： ifisset$GET'language' && $GET'language' != '' include$PHPCMSINCLUDEPATH.'/language.'.$GETlanguage; ... phpCMS phpCMS 1.2.1pl1 phpCMS phpCMS 1.2.1 phpCMS phpCMS 1.2.0...

CVE-2008-4330

Summary: CVE-2008-4330 describes a directory traversal vulnerability in LanSuite 3.3.2, specifically in index.php where the design parameter can be exploited to include and execute arbitrary local files via a .. sequence. The NVD entry assigns a CVSS v2 base score of 7.5 (HIGH) with Network attac...

CVE-2008-4331: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in library/pagefunctions.inc.php in phpOCS 0.1 beta3 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the act parameter to index.php...

CVE-2008-4330: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in LanSuite 3.3.2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the design parameter...

CVE-2008-4158: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in index.php in Zanfi CMS lite 1.2 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 flag and 2 inc parameters...

Mantis: Multiple vulnerabilities

Background Mantis is a PHP/MySQL/Web based bugtracking system. Description Antonio Parata and Francesco Ongaro reported a Cross-Site Request Forgery vulnerability in manageusercreate.php CVE-2008-2276, a Cross-Site Scripting vulnerability in returndynamicfilters.php CVE-2008-3331, and an...

CVE-2008-3851: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Pluck CMS 4.5.2 on Windows allow remote attackers to include and execute arbitrary local files via a ..\ dot dot backslash in the 1 blogpost, 2 cat, and 3 file parameters to data/inc/themes/predefinedvariables.php, as reachable through index.php; an...

CVE-2008-3770: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Freeway 1.4.1.171, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter to 1 includes/eventsapplicationtop.php; 2 english/account.php, 3 french/account.php, a...

CVE-2008-3677: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in includes/eventsapplicationtop.php in Freeway before 1.4.2.197 allows remote attackers to include and execute arbitrary local files via unspecified vectors...

CVE-2008-3593: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in SyzygyCMS 0.3 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-3486: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the usergetprofile function in include/functions.inc.php in Coppermine Photo Gallery CPG 1.4.18 and earlier, when the charset is utf-8, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang part of serialized data in...

CVE-2008-3446: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in inc/wysiwyg.php in LetterIt 2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

Pligg <= 9.9.0 Multiple Vulnerabilities

GulfTech Security Research July 30, 2008 Vendor : Pligg LLC URL : http://www.pligg.com/ Version : Pligg = 9.9 Risk : Multiple Vulnerabilities Description: Pligg is a popular open source, full featured, content management system written in php. There are a number of vulnerabilities within Pligg th...

Pligg CMS 9.9.0 - Cross-Site Scripting Local File Inclusion SQL Injection

Pligg CMS 9.9.0 - Cross-Site Scripting Local File Inclusion SQL Injection GulfTech Security Research July 30, 2008 Vendor : Pligg LLC URL : http://www.pligg.com/ Version : Pligg alertdocument.cookie; The above example link would display the end users cookie to them. Of course this can also be use...

Fedora 9 : mantis-1.1.2-1.fc9 (2008-6647)

Update to upstream version 1.1.2, fixing following security issues: - 0008974: XSS Vulnerability in filters - 0008975: CSRF Vulnerabilities in usercreate CVE-2008-2276 - 0008976: Remote Code Execution in admconfig - 0009154: arbitrary file inclusion through user preferences page See upstream...

Pluck 4.5.1 (blogpost) Local File Inclusion Vulnerability (win only)

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: Pluck Local File inclusion Vendor: http://www.pluck-cms.org Bug: Local File Inclusion Vulnerable Version: 4.5.1 prior versions also may be affected Exploitation: Remote with browser Fix: N/A - Description:...

Pluck Local File inclusion

www.BugReport.ir AmnPardaz Security Research Team Title: Pluck Local File inclusion Vendor: http://www.pluck-cms.org Bug: Local File Inclusion Vulnerable Version: 4.5.1 prior versions also may be affected Exploitation: Remote with browser Fix: N/A - Description: Pluck is a content management...