CVE-2010-2034

Directory traversal vulnerability in the Percha Image Attach comperchaimageattach component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2010-2018

Directory traversal vulnerability in downlot.php in Lokomedia CMS 1.4.1 and 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2010-1957

Directory traversal vulnerability in the Love Factory comlovefactory component 1.3.4 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

DEBIAN-CVE-2010-1457

Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 allows local users to read arbitrary files via a 1 -c or 2 -a option, which prints file contents in an error message...

UBUNTU-CVE-2010-1457

Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 allows local users to read arbitrary files via a 1 -c or 2 -a option, which prints file contents in an error message...

CVE-2010-1878

Joomla! component OrgChart (com_orgchart) 1.0.0 is affected by a Local File Inclusion (directory traversal) vulnerability. The flaw allows an attacker to read arbitrary files by supplying a .. in the controller parameter to index.php, enabling unauthorized file access. Connected data confirms the...

CVE-2010-1723

Joomla! Component iNetLanka Contact Us Draw Root Map (com_drawroot) version 1.1 is affected by a Local File Inclusion (directory traversal) vulnerability. The issue arises from passing a .. sequence in the controller parameter to index.php, enabling remote attackers to read arbitrary server files...

CVE-2010-1471

Directory traversal vulnerability in the AddressBook comaddressbook component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1340

CVE-2010-1340 affects the Joomla! component com_jresearch. A directory traversal in jresearch.php allows a remote attacker to read arbitrary local files by injecting “..” into the controller parameter of index.php, effectively a local file inclusion. The Nuclei template confirms the LFI vector an...

CVE-2010-1314

Joomla! component Highslide JS com_hsconfig (versions 1.5 and 2.0.9) contains a Local File Inclusion via the controller parameter to index.php, enabling a directory traversal (..). This allows reading arbitrary server files. The NUCLEI template confirms the vulnerability and notes remediation as ...

CVE-2010-1298

Summary of CVE-2010-1298 : A directory traversal vulnerability exists in Pulse CMS 1.2.2, specifically in view.php, where an attacker can read arbitrary files by manipulating the f parameter in directory traversal sequences. The issue is documented across multiple sources (NVD, Red Hat, CVE List,...

CVE-2010-0676

CVE-2010-0676 describes a directory traversal vulnerability in the Joomla! component RWCards (com_rwcards) version 3.0.18, where an attacker can read arbitrary files by manipulating the controller parameter with a .. sequence. The issue affects the index.php file in the component and is documente...

pidgin/libpurple: MSN custom smiley request directory traversal file disclosure

Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. dot dot in an application/x-msnmsgrp2p MSN emoticon aka custom smiley request, a related issue to CVE-2004-0122. NOTE: it cou...

DEBIAN-CVE-2010-0013

Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. dot dot in an application/x-msnmsgrp2p MSN emoticon aka custom smiley request, a related issue to CVE-2004-0122. NOTE: it cou...

PHP interface.c 存在任意文件读取漏洞

No description provided by source...

DEBIAN-CVE-2009-4023

Argument injection vulnerability in the sendmail implementation of the Mail::Send method Mail/sendmail.php in the Mail package 1.1.14 for PEAR allows remote attackers to read and write arbitrary files via a crafted $from parameter, a different vector than CVE-2009-4111...

CVE-2009-2944

The CVE-2009-2944 entry concerns an incomplete blacklist in the teximg plugin of ikiwiki, allowing context-dependent attackers to read arbitrary files via crafted TeX commands. Affected software is ikiwiki with the teximg plugin, specifically versions before 3.1415926 and before 2.53.4 of the 2.x...

CVE-2008-6960

download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbitrary files via an encoded url parameter, as demonstrated by obtaining database credentials from includes/constants.php...

DOMPDF Arbitrary File Read <= 0.5.1

================================= DOMPDF Arbitrary File Read = 0.5.1 ================================= Discovered by: Aung Khant, YGN Ethical Hacker Group, Myanmar http://yehg.net/ believe in full disclosure Advisory URL: http://yehg.net/lab/pr0js/view.php/Apache20Security20Bypass20Vul20DomPDF.pd...

CVE-2009-2557

The vulnerability CVE-2009-2557 affects Admin News Tools 2.5, with a directory traversal flaw in system/download.php that permits reading arbitrary files via a .. sequence in the fichier parameter. This is described across multiple sources (NVD entry for CVE-2009-2557 and OpenVAS detail for Admin...