CVE-2010-0045

Apple Safari before 4.0.5 on Windows does not properly validate external URL schemes, which allows remote attackers to open local files and execute arbitrary code via a crafted HTML document...

CVE-2010-0045

Apple Safari before 4.0.5 on Windows does not properly validate external URL schemes, which allows remote attackers to open local files and execute arbitrary code via a crafted HTML document...

CVE-2009-4683

Directory traversal vulnerability in vote.php in Good/Bad Vote allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter in a dovote action. NOTE: some of these details are obtained from third party information...

CVE-2010-0957

Directory traversal vulnerability in content.php in Saskia's Shopsystem beta1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter...

Directory traversal

Directory traversal vulnerability in content.php in Saskia's Shopsystem beta1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter...

CVE-2009-4679

Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus comifnexus component 1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...

Directory traversal

Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus comifnexus component 1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...

Directory traversal

Multiple directory traversal vulnerabilities in the Core Design Scriptegrator plugin 1.4.1 for Joomla! allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 file parameter to libraries/jquery/js/ui/jsloader.php and the 2 files parameter to...

CVE-2010-0760

Multiple directory traversal vulnerabilities in the Core Design Scriptegrator plugin 1.4.1 for Joomla! allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 file parameter to libraries/jquery/js/ui/jsloader.php and the 2 files parameter to...

Kojoney DoS

Insufficient URL filtering in curl and wget emulation allows access to local files and devices, causing memory exhaustion...

Debian DSA-1967-1 : transmission - directory traversal

Dan Rosenberg discovered that Transmission, a lightwight client for the Bittorrent filesharing protocol, performs insufficient sanitising of file names specified in .torrent files. This could lead to the overwrite of local files with the privileges of the user running Transmission if the user is...

Directory traversal

Directory traversal vulnerability in index.php in ZeusCMS 0.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter...

CVE-2010-0680

Directory traversal vulnerability in index.php in ZeusCMS 0.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter...

Worldweaver DX Studio Player shell.execute() Command Execution

This module exploits a command execution vulnerability within the DX Studio Player from Worldweaver for versions 3.0.29 and earlier. The player is a browser plugin for IE ActiveX and Firefox dll. When an unsuspecting user visits a web page referring to a specially crafted .dxstudio document, an...

CVE-2010-0613

CVE-2010-0613 describes a directory traversal vulnerability in ARWScripts Fonts Script, via viewfile.php, allowing remote reading of arbitrary local files through a base64-encoded f parameter. Affected component: ARWScripts Fonts Script (viewfile.php). Root cause: improper handling of path traver...

TVUPlayer ActiveX code execution

Insecure method allows local files access...

GNOME Nautilus

According to the GNOME documentations, the file manager Nautilus is able to display a preview of most of the files. ref: http://library.gnome.org/users/user-guide/stable/gosnautilus-60.html.en This is a Proof Of Concept, it works using the default settings Local Files Only checked. ++++ BEGIN...

PT-2010-2312 · Microsoft · Internet Explorer +5

Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows remote attackers to bypass intended access restrictions and read arbitrary files via vectors involving the product's use of text/html as the default content...

[Backports-security-announce] Security update for transmission

Leo Costela and Josselin Mouette uploaded new packages for transmission which fixed the following security problem: CVE-2010-0012 DSA-1967-1 Dan Rosenberg discovered that Transmission, a lightweight client for the Bittorrent filesharing protocol performs insufficient sanitizing of file names...

Joomla! 1.5.12 - readexec Remote files

Joomla! 1.5.12 - readexec Remote files . TITLE: Joomla 1.5.12 read/exec remote files AUTHOR: Nikola Petrov [email protected] VERSION: 1.0 LICENSE: GNU General Public License Platform: Joomla 1.5.12 Vulnerabilities discovery and implementation: Nikola Petrov [email protected] Date: 27.08.2009 ...