CVE-2008-2534: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin/adminframe.php in Phoenix View CMS Pre Alpha2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the ltarget parameter...

Quate CMS多个输入验证漏洞

BUGTRAQ ID: 29348 Quate CMS是运行在PHP和MySQL上的网站内容管理系统。 Quate CMS的多个模块没有正确验证用户提供的输入，可能导致跨站脚本攻击、泄露敏感信息或入侵有漏洞的系统。 1 当bypassinstalled设置为1的时候，admin/includes/header.php文件中没有正确地验证对securepagepath参数的输入便用于包含文件： if $bypassinstalled != 1 if !isfile"../includes/installed" ... require"../includes/simplegui.php";...

CVE-2008-2482: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in installmod.php in insanevisions OneCMS 2.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the load parameter in a go action...

CVE-2008-2415: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in template/purpletech/baseinclude.php in DigitalHive aka hive 2.0 RC2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-2352: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Smeego 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang cookie...

CVE-2008-2227: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in PHP-Fusion Forum Rank System 6 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the settingslocale parameter to 1 forum.php and 2 profile.php in infusions/ranksystem/. NOTE: the provenance of this information i...

CVE-2008-2073: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in include/global.inc.php in Virtual Design Studio vlbook 1.21 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the l parameter...

CVE-2008-2076: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin.php in ActualScripts ActualAnalyzer Lite 2.78 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the style parameter...

CVE-2008-2017: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Chilek Content Management System aka ChiCoMaS 2.0.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the operation parameter to the default URI under install/...

CVE-2008-1962: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Aterr 0.9.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 class parameter to include/functions.inc.php and the 2 file parameter to include/common.inc.php...

CVE-2008-1861: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in modules/threadstop/threadstop.php in ExBB Italia 0.22 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the exbbdefaultlang parameter...

CVE-2008-1798: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in forum/kietu/libs/calendrier.php in Dragoon 0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the callng parameter...

CVE-2008-1696: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in makepost.php in DaZPHPNews 0.1-1, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the prefixdir parameter...

CVE-2008-1635: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in viewprivate.php in Keep It Simple Guest Book KISGB 5.0.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tmptheme parameter. NOTE: 5.1.1 is also reportedly affected...

CVE-2008-1624: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in v2demo/page.php in Jshop Server 1.x through 2.x allows remote attackers to include and execute arbitrary local files via a .. dot dot in the xPage parameter...

CVE-2008-1565: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in forum/irc/irc.php in the PJIRC 0.5 module for phpBB allows remote attackers to include and execute arbitrary local files via a .. dot dot in the phpEx parameter...

CVE-2008-1534: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in PowerPHPBoard 1.00b allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 settingsfooter parameter to footer.inc.php and the 2 settingsheader parameter to header.inc.php...

CVE-2008-1492: Improper Input Validation

Multiple directory traversal vulnerabilities in CoronaMatrix phpAddressBook 2.11 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the skin parameter to 1 index.php and 2 install.php. NOTE: it was later reported that vector 1 is also present in 2.0...

CVE-2008-1493: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in login.php in Cuteflow Bin 1.5.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

Debian: Security Advisory (DSA-1519-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...