Directory traversal

Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop LWS php User Base 1.3beta allows remote attackers to include and execute arbitrary local files via the template parameter...

Directory traversal

Directory traversal vulnerability in a.php in AR Web Content Manager AWCM 2.1, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the a parameter...

CVE-2009-3219

Directory traversal vulnerability in a.php in AR Web Content Manager AWCM 2.1, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the a parameter...

CVE-2008-7163

Directory traversal vulnerability in mods/Integrated/index.php in SineCMS 2.3.5 and earlier, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via the sineconfigindexmain parameter...

Directory traversal

Directory traversal vulnerability in mods/Integrated/index.php in SineCMS 2.3.5 and earlier, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via the sineconfigindexmain parameter...

CVE-2008-7163

Directory traversal vulnerability in mods/Integrated/index.php in SineCMS 2.3.5 and earlier, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via the sineconfigindexmain parameter...

CVE-2009-3064

Directory traversal vulnerability in debugger/debugphp.php in Ve-EDIT 0.1.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the GETfilename parameter...

CVE-2009-3053

Directory traversal vulnerability in the Agora comagora component 3.0.0b for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action parameter to the avatars page, reachable through index.php...

Directory traversal

Directory traversal vulnerability in debugger/debugphp.php in Ve-EDIT 0.1.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the GETfilename parameter...

CVE-2009-3064

Summary: CVE-2009-3064 concerns Ve-EDIT 0.1.4. The vulnerability is in the file debugger/debug_php.php , where a attacker can exploit a directory traversal via a .. in the _GET[filename] parameter. This can lead to local file inclusion and remote execution of arbitrary code, as described in the a...

Gentoo Security Advisory GLSA 200908-09 (dokuwiki)

The remote host is missing updates announced in advisory GLSA 200908-09. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Directory traversal

module.php in ezContents 2.0.3 allows remote attackers to bypass the directory traversal protection mechanism to include and execute arbitrary local files via "....//" doubled dot dot slash sequences in the link parameter, which is not properly filtered using the strreplace function...

Directory traversal

Multiple directory traversal vulnerabilities in ezContents 2.0.3 allow remote attackers to include and execute arbitrary local files via the 1 gsLanguage and 2 languagehome parameters to modules/diary/showdiary.php; 3 adminhome, 4 gsLanguage, and 5 languagehome parameters to...

CVE-2008-7054

Multiple directory traversal vulnerabilities in ezContents 2.0.3 allow remote attackers to include and execute arbitrary local files via the 1 gsLanguage and 2 languagehome parameters to modules/diary/showdiary.php; 3 adminhome, 4 gsLanguage, and 5 languagehome parameters to...

Directory traversal

Multiple directory traversal vulnerabilities in dit.cms 1.3, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the path parameter to index.php in 1 install/, 2 menus/leftrightslideopen/, 3 menus/sidepullout/, 4...

CVE-2009-2787

CVE-2009-2787 is a directory traversal vulnerability in the Reputation plugin for PunBB (versions 2.2.4, 2.2.3, 2.0.4 and earlier). The issue arises when register_globals is enabled and magic_quotes_gpc is disabled, allowing remote attackers to include and execute arbitrary local files via a .. i...

CVE-2009-2792

Directory traversal vulnerability in plugings/pagecontent.php in Really Simple CMS RSCMS 0.3a allows remote attackers to include and execute arbitrary local files via a .. dot dot in the PT parameter...

Directory traversal

Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the scriptpathshow parameter in a GoAhead action. NOTE: this issue only...

CVE-2008-6926

Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the scriptpathshow parameter in a GoAhead action. NOTE: this issue only...

CVE-2008-6926

Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the scriptpathshow parameter in a GoAhead action. NOTE: this issue only...