Directory traversal

Multiple directory traversal vulnerabilities in ProMan 0.1.1 and earlier allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the SESSIONuserLang parameter to 1 elisttasks.php, 2 managepmanagers.php, 3 manageusers.php, 4 helpfunc.php, 5...

Directory traversal

Directory traversal vulnerability in the SimpleDownload comsimpledownload component before 0.9.6 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...

CVE-2010-2122

CVE-2010-2122 affects Joomla! through the SimpleDownload (com_simpledownload) component prior to 0.9.6. The vulnerability is a directory traversal flaw that allows remote attackers to retrieve arbitrary local files by supplying a double dot (..) in the controller parameter to index.php. Affected ...

Core FTP Server Directory Traversal Vulnerability

Core FTP Server is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user- supplied input. Exploiting this issue will allow an attacker to view arbitrary local files within the context of the webserver. Information harvested may aid in launching...

Core FTP Server Directory Traversal Vulnerability

Core FTP Server is prone to a directory traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Core FTP Server 1.0.343 - Directory Traversal

Core FTP Server 1.0.343 - Directory Traversal source: https://www.securityfocus.com/bid/40422/info Core FTP Server is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view...

Directory traversal

Directory traversal vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mod parameter...

CVE-2010-2096

Directory traversal vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mod parameter...

Worldweaver DX Studio Player 3.0.29 - 'shell.execute()' Command Execution (Metasploit)

$Id: dxstudioplayerexec.rb 9375 2010-05-26 22:39:56Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2010-2006

Directory traversal vulnerability in op/op.Login.php in LetoDMS formerly MyDMS 1.7.2 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the lang parameter...

Directory traversal

Directory traversal vulnerability in scr/soustab.php in OpenMairie Opencatalogue 1.024, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsnphptype parameter, a related issue to CVE-2007-2069...

CVE-2010-1980

Directory traversal vulnerability in joomlaflickr.php in the Joomla Flickr comjoomlaflickr component 1.0.3 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1948

Directory traversal vulnerability in scr/soustab.php in openMairie Openfoncier 2.00, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsnphptype parameter, a related issue to CVE-2007-2069...

Directory traversal

Multiple directory traversal vulnerabilities in 60cycleCMS allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the DOCUMENTROOT parameter to 1 news.php, 2 submitComment.php, and 3 sqlConnect.php...

CVE-2010-0403

CVE-2010-0403 affects phpGroupWare (phpgw) up to version 0.9.16.015; a directory traversal flaw in about.php allows remote attackers to include arbitrary local files via the app parameter, enabling Local File Inclusion. Debian/OpenVAS references indicate additional SQL injection issues and confir...

Directory traversal

Directory traversal vulnerability in scr/soustab.php in openMairie openPlanning 1.00, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsnphptype parameter, a related issue to CVE-2007-2069...

Directory traversal

Directory traversal vulnerability in scr/soustab.php in openMairie openCourrier 2.02 and 2.03 beta, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsnphptype parameter, a related issue to CVE-2007-2069...

CVE-2010-1926

The CVE-2010-1926 entry applies to openMairie openCourrier 2.02 and 2.03 beta. It describes a directory traversal vulnerability in scr/soustab.php that, with register_globals enabled, allows remote attackers to include and execute arbitrary local files via traversal sequences in the dsn[phptype] ...

CVE-2010-1935

Directory traversal vulnerability in scr/soustab.php in openMairie Openpresse 1.01, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsnphptype parameter, a related issue to CVE-2007-2069...

Mereo <= 1.9.1 Directory Traversal Vulnerability - Active Check

Mereo is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...