CVE-2007-2412: Undefined Security Weakness

Directory traversal vulnerability in modules/file.php in Seir Anphin allows remote attackers to obtain sensitive information via a .. dot dot in the afilepath parameter. NOTE: a third party has disputed this issue because the a array is populated by a database query before use...

JulmaCMS 1.4(file.php file)Remote File Disclosure

JulmaCMS 1.4file.php fileRemote File Disclosure D.Script: http://julmajanne.com/downloads/julma.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc V.Code In /file.php: /file.php ?php // $Id: file.php,v 1.4 2004/04/24 18:18:22 janne Exp $ include"config.php"; include"lib/mime.php"...

CVE-2007-2324

Directory traversal vulnerability in file.php in JulmaCMS 1.4 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2007-2324: Undefined Security Weakness

Directory traversal vulnerability in file.php in JulmaCMS 1.4 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2007-2324

CVE-2007-2324 describes a directory traversal in JulmaCMS 1.4 where the file.php parameter accepts a dot-dot gesture (..), enabling a remote attacker to read arbitrary files. This is caused by insufficient validation of the file parameter and affects the ability to access files outside the intend...

JulmaCMS 1.4 (file.php file) Remote File Disclosure Vulnerability

No description provided by source. JulmaCMS 1.4file.php fileRemote File Disclosure D.Script: http://julmajanne.com/downloads/julma.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc V.Code In /file.php: /file.php ?php // $Id: file.php,v 1.4 2004/04/24 18:18:22 janne Exp $...

JulmaCMS 1.4 - file.php Remote File Disclosure

JulmaCMS 1.4 - file.php Remote File Disclosure JulmaCMS 1.4file.php fileRemote File Disclosure D.Script: http://julmajanne.com/downloads/julma.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc V.Code In /file.php: /file.php dir . $file; $fname = basename$file; $mime =...

JulmaCMS 1.4 (file.php file) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================= JulmaCMS 1.4 file.php file Remote File Disclosure Vulnerability ================================================================= JulmaCMS 1.4file.php fileRemote File...

JulmaCMS 1.4 - 'file.php' Remote File Disclosure

JulmaCMS 1.4file.php fileRemote File Disclosure D.Script: http://julmajanne.com/downloads/julma.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc V.Code In /file.php: /file.php dir . $file; $fname = basename$file; $mime = mimetype"mime", $fname; header"Content-Type: $mime";...

New Vunerability

blueshoes-filemanager-4.6public $it : www.blueshoes.org Remote File Include Vulnerability APPpathcore Auth0r : xw0x c0ntact : xw0xatHotmaild0tcom wlc0m In x0|0x ======================================================= C0d : ===== ./file.php requireonce$APP'path''core'...

OpenDock Easy Doc <=1.4 (doc_directory) File Include Vulnerabilities

No description provided by source. ECHOADV49$2006 ----------------------------------------------------------------------------------------------- ECHOADV49$2006OpenDock Easy Doc =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...

[ECHO_ADV_49$2006]OpenDock Easy Doc <=1.4 (doc_directory) Multiple Remote File Inclusion Vulnerability

ECHOADV49$2006 ----------------------------------------------------------------------------------------------- ECHOADV49$2006OpenDock Easy Doc =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...

CVE-2004-2240

Multiple SQL injection vulnerabilities in Phorum 5.0.11 and earlier allow remote attackers to modify SQL statements via 1 the query string in read.php or 2 unknown vectors in file.php...

CVE-2004-2240: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Phorum 5.0.11 and earlier allow remote attackers to modify SQL statements via 1 the query string in read.php or 2 unknown vectors in file.php...

CVE-2004-1425: Undefined Security Weakness

Directory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers to read arbitrary session files for known session IDs via a .. dot dot in the file parameter...