CVE-2007-5103: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in config.inc.php in Wordsmith 1.0 RC1, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the path parameter...

CVE-2007-5092: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in the Dance Music module for phpNuke, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in an ACCEPTFILE array parameter to modules.php...

CVE-2007-5050: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Neuron News 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the q parameter...

CVE-2007-5069: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in data/compatible.php in the Nuke Mobile Entertainment 1 addon for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. dot dot in the modulename parameter...

CVE-2007-5055: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the adminhome parameter to modules/poll/pollsummary.php or 2 the rootdp parameter to include/db.php...

CVE-2007-4641: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Pakupaku CMS 0.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter, as demonstrated by injecting code into an Apache log file...

CVE-2007-4457: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in forumreply.php in Dalai Forum 1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the chemin parameter...

CVE-2007-4008: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in custom.php in Entertainment Media Sharing CMS allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pagename parameter...

CVE-2007-3547: Undefined Security Weakness

Directory traversal vulnerability in qticheckname.php in QuickTicket 1.2 allows remote attackers to include and execute arbitrary local files a .. dot dot in the lang parameter...

CVE-2007-3535: Undefined Security Weakness

Multiple directory traversal vulnerabilities in GL-SH Deaf Forum 6.4.4 and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 FORUMLANGUAGE parameter to functions.php or the 2 style parameter to bottom.php...

CVE-2007-3523: Undefined Security Weakness

Multiple directory traversal vulnerabilities in Module/Galerie.php in XCMS 1.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 Ent or 2 Lang parameter...

CVE-2007-3312: Undefined Security Weakness

Directory traversal vulnerability in admin/pluginmanager.php in Jasmine CMS 1.0 allows remote authenticated administrators to include and execute arbitrary local files a .. dot dot in the u parameter. NOTE: a separate vulnerability could be leveraged to make this issue exploitable by remote...

CVE-2007-3251: Undefined Security Weakness

Multiple directory traversal vulnerabilities in e-Vision CMS 2.02 and earlier allow remote attackers to 1 include and execute arbitrary local files via a .. dot dot in the adminlang cookie to admin/functions.php or 2 read arbitrary local files via the img parameter to admin/showimg.php...

CVE-2007-3096: Undefined Security Weakness

Directory traversal vulnerability in login.php in PBLang PBL 4.67.16.a and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

CVE-2007-2960: Undefined Security Weakness

Multiple directory traversal vulnerabilities in Scallywag 2005-04-25 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the skinname parameter to template.php in 1 skin/dark/, 2 skin/gold/, or 3 skin/original/, a different vector than CVE-2007-2900. NOTE: the...

CVE-2007-2503: Undefined Security Weakness

Directory traversal vulnerability in turbulence.php in PHP Turbulence 0.0.1 alpha allows remote attackers to include and execute arbitrary local files via a .. dot dot in the GLOBALStcore parameter. NOTE: this vulnerability is disputed by CVE and a reliable third party because a direct request to...

CVE-2007-2482: Undefined Security Weakness

Directory traversal vulnerability in wordtube-button.php in the wordTube 1.43 and earlier plugin for WordPress, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the wpPATH parameter...

CVE-2007-2483: Undefined Security Weakness

Directory traversal vulnerability in js/wptable-button.php in the wp-Table 1.43 and earlier plugin for WordPress, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via the wpPATH parameter...

CVE-2007-2303: Undefined Security Weakness

Directory traversal vulnerability in includes/footer.php in News Manager Deluxe NMDeluxe 1.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the template parameter...

CVE-2007-2304: Undefined Security Weakness

Multiple directory traversal vulnerabilities in Quick and Dirty Blog QDBlog 0.4, and possibly earlier, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the theme parameter to categories.php and other unspecified files...