CVE-2009-3884

The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo aka tz files, aka Bug Id 6824265...

CVE-2009-3884

The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo aka tz files, aka Bug Id 6824265...

Windows Media Player Plugin: Local File Detection Vulnerability

No description provided by source. Windows Media Player Plugin: Local File Detection Vulnerability A design flaw in Windows Media Player 11 allows a remote attacker to determine the \ presence of local files programs, documents, etc.. I sent an e-mail to Microsoft \ nearly a year ago but they nev...

Directory traversal

Directory traversal vulnerability in include/processor.php in Greenwood PHP Content Manager 0.3.2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the contentpath parameter...

Directory traversal

Multiple directory traversal vulnerabilities in GenCMS 2006 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 p parameter to show.php and the 2 Template parameter to admin/pages/SiteNew.php...

CVE-2009-3824

Directory traversal vulnerability in include/processor.php in Greenwood PHP Content Manager 0.3.2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the contentpath parameter...

CVE-2009-3825

GenCMS 2006 contains multiple directory traversal flaws that allow remote attackers to include and execute arbitrary local files via the dot-dot (..) in the (1) p parameter to show.php and (2) the Template parameter to admin/pages/SiteNew.php. The affected software and parameters are stated in CV...

Directory traversal

Directory traversal vulnerability in www/index.php in Sahana 0.6.2.2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mod parameter...

phpCMS 2008 - 'download.php' Information Disclosure

source: https://www.securityfocus.com/bid/42514/info PHPCMS2008 is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attacker can exploit this issue to download local files in the context of the webserver process. This may allow the...

CVE-2009-3694

Directory traversal vulnerability in config/config.php in ezRecipe-Zee 91, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cfgprePath parameter...

Directory traversal

Directory traversal vulnerability in config/config.php in ezRecipe-Zee 91, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cfgprePath parameter...

CVE-2009-3694

CVE-2009-3694 affects ezRecipe-Zee 91; a directory traversal flaw in config/config.php allows remote inclusion and execution of local files via a .. in cfg[prePath] when register_globals is enabled. Root cause is improper handling of user-controlled path input enabling local file inclusion. The c...

CVE-2009-3694

Directory traversal vulnerability in config/config.php in ezRecipe-Zee 91, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cfgprePath parameter...

CVE-2009-3515

Directory traversal vulnerability in dnetadmin/index.php in d.net CMS allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the type parameter...

Directory traversal

Multiple directory traversal vulnerabilities in MUJE CMS 1.0.4.34 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 class parameter to admin.php and the 2 url parameter to install/install.php; and allow remote authenticated administrators to read...

Directory traversal

Directory traversal vulnerability in dnetadmin/index.php in d.net CMS allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the type parameter...

Directory traversal

Directory traversal vulnerability in modules.php in CMSphp 0.21 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the modfile parameter...

Directory traversal

Multiple directory traversal vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the module parameter to graph.php; or the 2 module or 3 file parameter to include/Ajax/CommonAjax.php, reachable through...

CVE-2009-3249

CVE-2009-3249 pertains to vtiger CRM 5.0.4 and involves multiple directory traversal/remote file inclusion weaknesses. Technical details from the sources confirm: Vulnerabilities in graph.php via the module parameter and in include/Ajax/CommonAjax.php via module/file, reachable through modules li...

CVE-2008-7240

Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop LWS php User Base 1.3beta allows remote attackers to include and execute arbitrary local files via the template parameter...