CVE-2007-6624

The CVE-2007-6624 issue is a directory traversal/local file inclusion vulnerability in PNphpBB2 1.2i and earlier, exploitable via a .. in the phpEx parameter of printview.php. The active impact is indicated as partial confidentiality, integrity, and availability (CVSS v2 base score 6.8). The vuln...

CVE-2007-6624: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in printview.php in PNphpBB2 1.2i and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the phpEx parameter...

CVE-2007-6615: Improper Control of Generation of Code

Directory traversal vulnerability in includes/block.php in Agares Media phpAutoVideo 2.21 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the selectedprovider parameter...

CVE-2007-6584

1024 CMS 1.3.1 is affected by multiple directory traversal vulnerabilities that allow remote attackers to include and execute arbitrary local files via ../ in specific parameters (lang, theme_dir, admin_theme_dir) across several pages (news.php, search.php, download.php, forum.php, etc.). The not...

CVE-2007-6567: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pagename parameter in a page view action...

CVE-2007-6584: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in 1024 CMS 1.3.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the lang parameter to pages/print/default/ops/news.php or 2 the themedir parameter to pages/download/default/ops/search.php; or the adminthemedi...

CVE-2007-6552: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in AuraCMS 2.2 allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the act parameter, possibly involving the news pilih component; as demonstrated by including admin/adminusers.php to bypass a protection...

CVE-2007-6471: Improper Limitation of a Pathname to a Restricted Directory

Incomplete blacklist vulnerability in main.php in phPay 2.02.01 on Windows allows remote attackers to conduct directory traversal attacks and include and execute arbitrary local files via a ..\ dot dot backslash in the config parameter...

CVE-2007-6376: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in autohtml.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the filename parameter, a different vector than CVE-2006-4190. NOTE: the provenance of this information is unknown; the detail...

CVE-2007-6344

The CVE-2007-6344 issue affects Mcms Easy Web Make 1.3, where a directory traversal vulnerability in modules/cms/index.php allows remote inclusion and execution of local files via a .. in the template parameter. This enables an attacker to trigger arbitrary local file reads/executes on affected i...

CVE-2007-6230: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in common/classes/classHeaderHandler.lib.php in Rayzz Script 2.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the CFGsiteprojectpath parameter...

CVE-2007-6086: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in VigileCMS 1.4 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the module parameter...

CVE-2007-5915: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in phphelpdesk 0.6.16 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the whattodo parameter...

CVE-2007-5845: Improper Control of Generation of Code

Directory traversal vulnerability in error.php in GuppY 4.6.3, 4.5.16, and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the id parameter. NOTE: this can be leveraged to bypass authentication and upload arbitrary files by including...

CVE-2007-5820: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Ax Developer CMS AxDCMS 0.1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the module parameter...

CVE-2007-5802: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Firewolf Technologies Synergiser 1.2 RC1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter. NOTE: this can be leveraged to obtain the path by including a local PHP script with a...

CVE-2007-5642: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in PHP Project Management 0.8.10 and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the deflang parameter to modules/files/list.php; the mpath parameter to 2 modules/projects/summary.inc.php or 3...

CVE-2007-5650: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in system.php in ReloadCMS 1.2.7 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the module parameter to index.php...

CVE-2007-5321: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Verlihub Control Panel VHCP 1.7 and earlier allows remote attackers to include arbitrary files via a .. dot dot in the page parameter...

CVE-2007-5174: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in phpinc/news.php in actSite 1.56 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the do parameter...