CVE-2006-4579: Undefined Security Weakness

Directory traversal vulnerability in users.php in The Address Book 1.04e allows remote attackers to include arbitrary files via a .. dot dot in the language parameter...

CVE-2006-6613: Undefined Security Weakness

Directory traversal vulnerability in language.php in phpAlbum 0.4.1 Beta 6 and earlier, when magicquotesgpc is disabled and registerglobals is enabled, allows remote attackers to include and execute arbitrary local files or obtain sensitive information via a .. dot dot in the palangincludefile...

CVE-2006-6568: Undefined Security Weakness

Directory traversal vulnerability in includes/kbconstants.php in the Knowledge Base mxkb 2.0.2 module for mxBB allows remote attackers to include arbitrary files via a .. dot dot sequence in the phpEx parameter...

CVE-2006-6465: Undefined Security Weakness

Directory traversal vulnerability in WBmap.php in WikyBlog 1.3.2 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the l parameter. NOTE: CVE disputes this vulnerability because l is validated by ctypealpha before use...

CVE-2006-6419

CVE-2006-6419 affects Joomla! JCE Admin Component (com_jce) 1.1.0 beta2 and earlier. The vulnerability is a local file include/remote code execution issue in jce.php, where the (1) plugin or (2) file parameter can be used to include arbitrary local files, potentially executing PHP code on the ser...

CVE-2006-6391: Undefined Security Weakness

Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when registerglobals is enabled and magicquotesgpc is disabled, allow remote attackers to include arbitrary files via a .. dot dot in the configdbtype parameter to 1 actionsadmin/other.php and 2 actionsclient/gallery.ph...

CVE-2006-6392: Undefined Security Weakness

Directory traversal vulnerability in index.php in plx Web Studio aka plxWebDev plx Pay 3.2 and earlier allows remote attackers to include and execute arbitrary local files, or obtain user credentials and other sensitive information, via a .. dot dot in the read parameter. NOTE: The provenance of...

phpCMS1.2.x任意文件包含漏洞

有漏洞的include调用位于class.layoutphpcms.php中： ifisset$GET'language' && $GET'language' != '' include$PHPCMSINCLUDEPATH.'/language.'.$GETlanguage; ... --- 受影响系统： phpCMS phpCMS 1.2.1pl1 phpCMS phpCMS 1.2.1 phpCMS phpCMS 1.2.0 不受影响系统： phpCMS phpCMS 1.2.1pl2...

CVE-2006-6284: Undefined Security Weakness

Directory traversal vulnerability in admin.php in Vikingboard 0.1.2 allows remote authenticated administrators to include arbitrary files via a .. dot dot sequence in the act parameter...

CVE-2006-6047: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in manager/index.php in Etomite 0.6.1.2 allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the f parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then...

CVE-2006-5894: Undefined Security Weakness

Directory traversal vulnerability in lang.php in Rama CMS 0.68 and earlier, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file,...

CVE-2006-5834: Undefined Security Weakness

Directory traversal vulnerability in general.php in OpenSolution Quick.Cms.Lite 0.3 allows remote attackers to include arbitrary files via a .. dot dot sequence in the sLanguage Cookie parameter...

CVE-2006-5846: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to read and include arbitrary files via a .. dot dot in the page parameter, a different vector than CVE-2006-5773...

CVE-2006-5604: Undefined Security Weakness

Directory traversal vulnerability in phpcards.header.php in phpCards 1.3 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the CardLanguageFile parameter...

RaidenHTTPD 1.1.49 (SoftParserFileXml) Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- RaidenHTTPD/1.1.49 remote commands execution exploit by rgod [email protected] site: http://retrogod.altervista.org dork:...

CVE-2006-5263: Undefined Security Weakness

Directory traversal vulnerability in templates/header.php3 in phpMyAgenda 3.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter, as demonstrated by a parameter value naming an Apache HTTP Server log file that apparently...

PHP Live! <= 3.1 help.php Remote File Inclusion vulnerability

/ -------------------------------------------------------- Neo Security Team NST - Advisory 25 - 08/10/06 -------------------------------------------------------- Program: PHP Live! Homepage: http://www.phplivesupport.com/ Vulnerable Versions: 3.1 and prior Risk: High! Impact: Critical Risk -==PH...

CVE-2006-5115: Undefined Security Weakness

Directory traversal vulnerability in kgcall.php in KGB 1.87 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the engine parameter, as demonstrated by uploading a file containing PHP code with an image/jpeg content type, and then referencing this file throug...

CVE-2006-5149: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in OpenBiblio before 0.5.2 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the page parameter to shared/help.php or 2 the tab parameter to shared/header.php...

RaidenHTTPD 1.1.49 - 'SoftParserFileXml' Remote Code Execution

!/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- RaidenHTTPD/1.1.49 remote commands execution exploit by rgod [email protected] site: http://retrogod.altervista.org dork: Powered.by.RaidenHTTPD +intitle:index.of |...