CVE-2009-3583

Directory traversal vulnerability in the Preferences menu item in SQL-Ledger 2.8.24 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the countrycode field...

CVE-2009-3702: Improper Limitation of a Pathname to a Restricted Directory

Multiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 allow remote attackers to include and execute arbitrary local files via a full pathname in the configfile parameter to 1 update08.php or 2 update10.php. NOTE: in some environments, this can be leveraged for remote file inclusion...

[ISecAuditors Security Advisories] Simple PHP Blog <= 0.5.1 Local File Include vulnerability

============================================= INTERNET SECURITY AUDITORS ALERT 2009-005 - Original release date: March 2nd, 2009 - Last revised: December 18th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.8/10 CVSS scored ============================================= I. VULNERABILITY...

CVE-2009-4231: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in as/lib/plugins.php in SweetRice 0.5.3 and earlier allows remote attackers to include and execute arbitrary local files via .. dot dot in the plugin parameter...

Code injection

The U.S. Defense Information Systems Agency DISA Security Readiness Review SRR script for the Solaris x86 platform executes files in arbitrary directories as root for filenames equal to 1 java, 2 openssl, 3 php, 4 snort, 5 tshark, 6 vncserver, or 7 wireshark, which allows local users to gain...

CVE-2009-4211

The U.S. Defense Information Systems Agency DISA Security Readiness Review SRR script for the Solaris x86 platform executes files in arbitrary directories as root for filenames equal to 1 java, 2 openssl, 3 php, 4 snort, 5 tshark, 6 vncserver, or 7 wireshark, which allows local users to gain...

CVE-2009-4205: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin.php in Flashlight Free Edition allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter...

CVE-2009-4056: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin/popup.php in Betsy CMS 3.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the popup parameter...

CVE-2009-3825: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in GenCMS 2006 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 p parameter to show.php and the 2 Template parameter to admin/pages/SiteNew.php...

CVE-2009-3694: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in config/config.php in ezRecipe-Zee 91, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cfgprePath parameter...

CVE-2009-3664: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to include or execute arbitrary files via a .. dot dot in the 1 p and 2 s parameters...

Directory traversal

Directory traversal vulnerability in ls.php in LittleSite aka LS or LittleSite.php 0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the file parameter to index.php. NOTE: in some environments, this can be leveraged for remote file inclusion by using a U...

CVE-2009-3508: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in MUJE CMS 1.0.4.34 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 class parameter to admin.php and the 2 url parameter to install/install.php; and allow remote authenticated administrators to read...

CVE-2009-3515: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in dnetadmin/index.php in d.net CMS allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the type parameter...

CVE-2008-7240: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop LWS php User Base 1.3beta allows remote attackers to include and execute arbitrary local files via the template parameter...

CVE-2008-7163: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in mods/Integrated/index.php in SineCMS 2.3.5 and earlier, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via the sineconfigindexmain parameter...

CVE-2009-2963: Undefined Security Weakness

Unspecified vulnerability in the update feature in Toolbar Uninstaller 1.0.2 allows remote attackers to force the download and execution of arbitrary files via attack vectors related to a "malformed update url and a malformed update website."...

CVE-2008-7054

Technical details about CVE-2008-7054 are not publicly provided in the connected documents. The entries reiterate the vulnerability description without product/version specifics. Monitor for updates from official advisories to obtain concrete impact, affected components, and fixes.

CVE-2008-7054: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in ezContents 2.0.3 allow remote attackers to include and execute arbitrary local files via the 1 gsLanguage and 2 languagehome parameters to modules/diary/showdiary.php; 3 adminhome, 4 gsLanguage, and 5 languagehome parameters to...

CVE-2009-2784: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in dit.cms 1.3, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the path parameter to index.php in 1 install/, 2 menus/leftrightslideopen/, 3 menus/sidepullout/, 4...