CVE-2008-3163: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in dodosmail.php in DodosMail 2.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the dodosmailheaderfile parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-3164: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in blog.php in fuzzylime cms 3.01, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the file parameter. NOTE: it was later reported that 3.01a is also affected...

CVE-2008-3165: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in rss.php in fuzzylime cms 3.01a and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter, as demonstrated using content.php, a different vector than CVE-2007-4805...

CVE-2008-3031: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Simple PHP Agenda 2.2.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-2993

CVE-2008-2993 affects FOG Forum 0.8.1. The vulnerability is a directory-traversal in index.php allowing remote attackers to include and execute arbitrary local files by manipulating the dot-dot (..) in parameters (fog_lang, fog_skin) and possibly (fog_pseudo, fog_posted, fog_password, fog_cook), ...

CVE-2008-2993: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in index.php in FOG Forum 0.8.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 foglang and 2 fogskin parameters, probably related to libs/required/share.inc; and possibly the 3 fogpseudo, 4 fogposted, 5...

CVE-2008-2974: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in chatconfig.php in MM Chat 1.5, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter...

CVE-2008-2985: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in loadlanguage.php in CMReams CMS 1.3.1.1 Beta 2, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the pagelanguage parameter...

CVE-2008-2982: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in HomePH Design 2.10 RC2, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 thumbtemplate parameter to a admin/templates/templatethumbnail.php, and the 2...

CVE-2008-2978: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in phpi/rss.php in Ourvideo CMS 9.5, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the prefix parameter...

CVE-2008-2913: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in func.php in Devalcms 1.4a, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the currentpath parameter, in conjunction with certain ... triple dot and ..... sequences in the currentfile...

CVE-2008-2896: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in FireAnt 1.3 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-2876: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in mUnky 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the zone parameter...

CVE-2008-2840: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Exero CMS 1.0.0 and 1.0.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the theme parameter to 1 custompage.php, 2 errors/404.php, 3 members/memberslist.php, 4 members/profile.php, 5 news/fullview.php, 6...

CVE-2008-2818: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Easy-Clanpage 3.0 b1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the section parameter to the default URI...

CVE-2008-2820: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in lang/lang-system.php in Open Azimyt CMS 0.22 minimal and 0.21 stable allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

CVE-2008-2813: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in WallCity-Server Shoutcast Admin Panel 2.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-2782: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in OtomiGenX 2.2 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter to 1 libraryrss.php and 2 rss.php...

CVE-2008-2687: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in inc/config.php in ProManager 0.73 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

CVE-2008-2672: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in ErfurtWiki R1.02b and earlier, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 ewikiid and 2 ewikiaction parameters to fragments/css.php, and possibly the 3 id parameter ...