CVE-2007-5491

Summary of CVE-2007-5491 family in SiteBar : The translation module (translator.php) in SiteBar 3.3.8 is vulnerable to a directory traversal attack via the lang parameter (using .. sequences), allowing remote authenticated users to chmod arbitrary files to 0777. Related entries (CVE-2007-5492, CV...

CVE-2003-1373

The provided documents describe CVE-2003-1373 as a vulnerability in PhpBB versions 1.4.0 through 1.4.4. The issue is a directory traversal that lets remote attackers read and include arbitrary files via dot-dot sequences followed by NULL (%00) characters in CGI parameters, demonstrated for the la...

CVE-2007-5455

Cross-site scripting XSS vulnerability in wxis.exe in WWWISIS 7.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a call to the iah/iah.xis IsisScript code, possibly involving the lang or exprSearch parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in wxis.exe in WWWISIS 7.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a call to the iah/iah.xis IsisScript code, possibly involving the lang or exprSearch parameter...

CVE-2007-4872

SimpNews 2.41.03 allows remote attackers to obtain sensitive information via 1 an invalid lang parameter to admin/index.php; or a direct request to 2 admin/dbginfos.php, 3 admin/heading.php, or 4 evsearch.php; which reveals the path in various error messages...

CVE-2007-5130

SimpGB 1.46.02 allows remote attackers to obtain sensitive information via 1 an invalid lang parameter to admin/index.php or 2 a direct request to admin/trailer.php, which reveals the path in various error messages...

PHPress 0.2.0 - adisplay.php?lang Local File Inclusion

PHPress 0.2.0 - adisplay.php?lang Local File Inclusion :::::::::::::::::::::::::::::::::::::::::::::::::::....................... ::| \ | | \ | | / | ::| | | | | | | | ::| . | |/ / \ | . |/ | ' \ / \ | | | '/ \ \ /\ / / ::| |\ | | | / | |\ | | | | | | | | / | || | | /\ V V / ::|| ||\| || |,||...

CVE-2007-3619

Directory traversal vulnerability in login.php in Maia Mailguard 1.0.2 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the lang parameter...

Directory traversal

Directory traversal vulnerability in qticheckname.php in QuickTicket 1.2 allows remote attackers to include and execute arbitrary local files a .. dot dot in the lang parameter...

CVE-2007-3547

Directory traversal vulnerability in qticheckname.php in QuickTicket 1.2 allows remote attackers to include and execute arbitrary local files a .. dot dot in the lang parameter...

Directory traversal

Multiple directory traversal vulnerabilities in Module/Galerie.php in XCMS 1.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 Ent or 2 Lang parameter...

CVE-2007-3523

Multiple directory traversal vulnerabilities in Module/Galerie.php in XCMS 1.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 Ent or 2 Lang parameter...

CVE-2007-3505

Multiple directory traversal vulnerabilities in QuickTalk forum 1.3 allow remote attackers to include and execute arbitrary local files via a .. dot dot sequence in the lang parameter to 1 qtfcheckname.php, 2 qtfjbirth.php, or 3 qtfjexists.php...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2007-3425

CVE-2007-3425 is a directory traversal vulnerability in phpTrafficA 1.4.2 and earlier. An attacker can cause Local File Inclusion by manipulating the lang parameter in index.php, allowing remote access to arbitrary local files. The root cause is unsafe handling of the lang parameter leading to in...

CVE-2007-3426

Cross-site scripting XSS vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

PBLang <= 4.67.16.a login.php lang Parameter Traversal Local File Inclusion

Binary data 4078.prm...

CVE-2007-3096

Directory traversal vulnerability in login.php in PBLang PBL 4.67.16.a and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

Directory traversal

Multiple directory traversal vulnerabilities in MolyX BOARD 2.5.0 allow remote attackers to read arbitrary files via a .. dot dot in the lang parameter to index.php and other unspecified PHP scripts...

Monalbum 0.8.7 Remote Code Execution Exploit

No description provided by source. ?php / \|/// \ - - // @ @ ----oOOo---oOOo--------------------------------------------------- Y! Underground Group [email protected] Dj7xpl.2600.ir ----ooooO-----Ooooo-------------------------------------------------- \ / \ /...