CVE-2008-6926: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the scriptpathshow parameter in a GoAhead action. NOTE: this issue only...

CVE-2008-6901: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in 2532designs 2532|Gigs 1.2.2 Stable, when registerglobals is enabled and magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter to 1 settings.php, 2 deleteuser.php, 3...

CVE-2009-2552: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in comments.php in Super Simple Blog Script 2.5.4 allow remote attackers to overwrite, include, and execute arbitrary local files via the entry parameter...

CVE-2009-2444: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in maillinglist/setup/step1.php.inc in ADbNewsSender before 1.5.6, and 2.0 before RC2, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pathtolang parameter to setup/index.php...

CVE-2009-2379: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...

CVE-2009-2263: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Awesome PHP Mega File Manager 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathnam...

CVE-2008-6833: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in commsrss.php in fuzzylime cms before 3.01b allows remote attackers to include and execute arbitrary local files via a .. dot dot in a files array element for a blogs action, as demonstrated by the files0 parameter...

CVE-2009-2124: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in page.php in Elvin 1.2.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the id parameter...

CVE-2009-1960: Improper Control of Generation of Code

inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via the configcascademaindefault parameter to doku.php. NOTE: PHP remote file inclusion is also possible in PHP 5 using ftp://...

CVE-2008-6825: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in user/index.php in Fonality trixbox CE 2.6.1 and earlier allows remote attackers to include and execute arbitrary files via a .. dot dot in the langChoice parameter...

Directory traversal

Directory traversal vulnerability in .include/init.php aka admin/include/init.php in QuiXplorer 2.3.2 and earlier, as used in TinyWebGallery TWG 1.7.6 and earlier, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter to admin/index.php...

CVE-2009-1911: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in .include/init.php aka admin/include/init.php in QuiXplorer 2.3.2 and earlier, as used in TinyWebGallery TWG 1.7.6 and earlier, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter to admin/index.php...

CVE-2009-1912: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in src/func/language.php in webSPELL 4.2.0e and earlier allows remote attackers to include and execute arbitrary local .php files via a .. dot dot in a language cookie. NOTE: this can be leveraged for SQL injection by including awards.php...

CVE-2009-1847: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Easy PX 41 CMS 9.0 B1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the fiche parameter...

CVE-2009-1846: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in SiteX 0.7.4 Build 418 and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the THEMEFOLDER parameter to 1 Corporate/homepage.php, 2 Fusion/homepage.php, 3 Joombo/homepage.php, 4 Streamline/homepage.php,...

CVE-2009-1774

The CVE-2009-1774 entry describes a Directory Traversal in Strawberry 1.1.1 affecting the plugin path plugins/ddb/foot.php, exploitable via a …/ file parameter to example/index.php to include and execute local files. The issue is triggered by crafting a path with .. (dot dot); details note that t...

CVE-2009-1765: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in pluck 4.6.2, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the langpref parameter to 1 data/modules/contactform/moduleinfo.php, 2 data/modules/blog/moduleinfo.php, and 3...

CVE-2009-1659: Undefined Security Weakness

Unrestricted file upload vulnerability in admin/uploadimage.php in eLitius 1.0 allows remote attackers to bypass intended access restrictions and upload and execute arbitrary files via an avatar file with an accepted Content-Type such as image/gif, then requesting the file in admin/banners/...

CVE-2009-1502: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in plugin.php in S-Cms 1.1 Stable and 1.5.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter...

CVE-2009-1486: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in pmscript.php in Flatchat 3.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the with parameter...