CVE-2010-2006: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in op/op.Login.php in LetoDMS formerly MyDMS 1.7.2 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the lang parameter...

SEC Consult SA-20100115-0 :: Local file inclusion/execution and multiple CSRF vulnerabilities in LetoDMS (formerly MyDMS)

SEC Consult Security Advisory 20100115-0 ======================================================================== title: Local file inclusion/execution and multiple Cross-Site-Request-Forgery vulnerabilities in LetoDMS formerly MyDMS products: LetoDMS formerly MyDMS vulnerable version: LetoDMS...

LetoDMS Local File Inclusion / Cross Site Request Forgery

SEC Consult Security Advisory ======================================================================== title: Local file inclusion/execution and multiple Cross-Site-Request-Forgery vulnerabilities in LetoDMS formerly MyDMS products: LetoDMS formerly MyDMS vulnerable version: LetoDMS formerly MyDM...

LetoDms 1.4.x - lang Local File Inclusion

LetoDms 1.4.x - lang Local File Inclusion source: https://www.securityfocus.com/bid/37828/info LetoDMS formerly known as MyDMS is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the...

LetoDms 1.4.x - 'lang' Local File Inclusion

source: https://www.securityfocus.com/bid/37828/info LetoDMS formerly known as MyDMS is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying computer;...