1073 matches found
CVE-2007-4369
Directory traversal vulnerability in go/files in SOTEeSKLEP before 4.0 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...
CVE-2007-3428: Undefined Security Weakness
Multiple unspecified vulnerabilities in phpTrafficA before 1.4.2 allow remote attackers to have an unknown impact via the file parameter to 1 plotStatBar.php or 2 plotStatPie.php, different vectors than CVE-2007-1076...
Design/Logic Flaw
downloadscript.asp in ASP Folder Gallery allows remote attackers to read arbitrary files via a filename in the file parameter...
CVE-2007-3158
downloadscript.asp in ASP Folder Gallery allows remote attackers to read arbitrary files via a filename in the file parameter...
CVE-2007-2486: Undefined Security Weakness
Directory traversal vulnerability in download.asp in Motobit 1.3 and 1.5 aka PStruh-CZ allows remote attackers to read arbitrary files via a .. dot dot in the File parameter...
CVE-2007-2368
picture.php in WebSPELL 4.01.02 and earlier allows remote attackers to read arbitrary files via the file parameter...
CVE-2007-2368
WebSPELL 4.01.02 (and earlier) is affected in picture.php where the file parameter can be abused to read arbitrary files. Root cause: improper handling of the file parameter allows remote attackers to access files, with no authentication and network-based access. The issue has a NVD CVSS v2 base ...
CVE-2007-2368: Undefined Security Weakness
picture.php in WebSPELL 4.01.02 and earlier allows remote attackers to read arbitrary files via the file parameter...
CVE-2007-2288: Undefined Security Weakness
PHP remote file inclusion vulnerability in info.php in Doruk100.net doruk100net allows remote attackers to execute arbitrary PHP code via a URL in the file parameter...
CVE-2007-2157
CVE-2007-2157 describes a directory traversal vulnerability in the Zomplog 3.8 application, specifically in upload/force_download.php. An attacker can use a dot-dot (..) sequence in the file parameter to read arbitrary files. The NVD entry confirms the issue and lists a high impact potential for ...
CVE-2007-1987
Multiple PHP remote file inclusion vulnerabilities in PHPEcho CMS 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 pluginfile parameter to smarty/internals/core.loadpulgins.php or the 2 rootpath parameter to index.php. NOTE: CVE disputes 1 because the inclusion occurs...
Design/Logic Flaw
download.php in Philex 0.2.3 and earlier allows remote attackers to read arbitrary files and source code, and obtain sensitive information via the file parameter...
CVE-2007-1698
download.php in Philex 0.2.3 and earlier allows remote attackers to read arbitrary files and source code, and obtain sensitive information via the file parameter...
iFrame for Phpnuke (iframe.php) Remote File Inclusion Vulnerability
No description provided by source. iFRAME for PhpNuke iframe.php Remote File Include Vulnerabilities script :http://www.desarrollonuke.org http://up.9q9q.net/up/index.php?f=uTRRQnIjG file : iframe.php Dork : "/nuke/iframe.php" Found by & Contact : Cold z3ro , [email protected] ,...
CVE-2007-1487: Undefined Security Weakness
Directory traversal vulnerability in index.php in Sascha Schroeder aka CyberTeddy or Cyber-inside WebLog allows remote attackers to read arbitrary files via a .. dot dot in the file parameter in a showarticles action...
PT-2007-2850 · Php · Php Photo Album
Name of the Vulnerable Software and Affected Versions: PHP Photo Album versions prior to 0.3.2.6 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the db file parameter in the common.php file. It is noted that versions 0.3.2.6 and 0.4.1beta do not contain...
CVE-2007-1393
CVE-2007-1393 describes a PHP remote file inclusion vulnerability in mysave.php of Magic CMS 4.2.747, allowing remote attackers to execute arbitrary PHP code by supplying a URL in the file parameter. The NVD metrics indicate a high-severity, network-accessible flaw with complete impact on confide...
LedgerSMB / SQL-Ledger file Parameter Multiple Vulnerabilities
The remote host is running LedgerSMB or SQL-Ledger, a web-based double-entry accounting system. The version of LedgerSMB or SQL-Ledger on the remote host fails to properly sanitize the 'file' parameter of the 'am.pl' script before using it in various template routines in the 'AM.pm' module. An...
CVE-2007-1303: Undefined Security Weakness
Directory traversal vulnerability in rb.cgi in RRDBrowse 1.6 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...