CVE-2008-4632

Multiple directory traversal vulnerabilities in index.php in Kure 0.6.3, when magicquotesgpc is disabled, allow remote attackers to read and possibly execute arbitrary local files via a .. dot dot in the 1 post and 2 doc parameters...

Directory traversal

Directory traversal vulnerability in index.php in Post Affiliate Pro 2.0 allows remote authenticated users to read and possibly execute arbitrary local files via a .. dot dot in the md parameter...

CVE-2008-4602

Directory traversal vulnerability in index.php in Post Affiliate Pro 2.0 allows remote authenticated users to read and possibly execute arbitrary local files via a .. dot dot in the md parameter...

Directory traversal

Directory traversal vulnerability in index.php in Sports Clubs Web Panel 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter...

CVE-2008-4592

CVE-2008-4592 : Directory traversal vulnerability in index.php of Sports Clubs Web Panel 0.0.1. The p parameter accepts a .. sequence, enabling remote attackers to include and execute arbitrary local files. Root cause: directory traversal flaw. Impact is described as arbitrary local file access/e...

CVE-2008-4528

Directory traversal vulnerability in notes.php in Phlatline's Personal Information Manager pPIM 1.01 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the id parameter in an edit action...

CVE-2008-4519

Multiple directory traversal vulnerabilities in Fastpublish CMS 1.9999 d allow remote attackers to include and execute arbitrary local files via a .. dot dot in the target parameter to 1 index2.php and 2 index.php...

CVE-2008-4526

Multiple directory traversal vulnerabilities in CCMS 3.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the skin parameter to 1 index.php, 2 forums.php, 3 admin.php, 4 header.php, 5 pages/story.php and 6 pages/poll.php...

Directory traversal

Multiple directory traversal vulnerabilities in CCMS 3.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the skin parameter to 1 index.php, 2 forums.php, 3 admin.php, 4 header.php, 5 pages/story.php and 6 pages/poll.php...

Directory traversal

Multiple directory traversal vulnerabilities in Fastpublish CMS 1.9999 d allow remote attackers to include and execute arbitrary local files via a .. dot dot in the target parameter to 1 index2.php and 2 index.php...

Directory traversal

Multiple directory traversal vulnerabilities in JMweb MP3 Music Audio Search and Download Script allow remote attackers to include and execute arbitrary local files via a .. dot dot in the src parameter to 1 listen.php and 2 download.php...

CVE-2008-4526

CVE-2008-4526 affects CCMS 3.1. Multiple directory traversal vulnerabilities allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the skin parameter to index.php, forums.php, admin.php, header.php, pages/story.php, and pages/poll.php. This entry has a CVSS v2 ...

CVE-2008-4522

Multiple directory traversal vulnerabilities in JMweb MP3 Music Audio Search and Download Script allow remote attackers to include and execute arbitrary local files via a .. dot dot in the src parameter to 1 listen.php and 2 download.php...

CVE-2008-4499

Multiple directory traversal vulnerabilities in PHP Web Explorer 0.99b and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 refer parameter to main.php and the 2 file parameter to edit.php...

CVE-2008-4486

Directory traversal vulnerability in index.php in SAC.php SACphp, as used in Yerba 6.3 and earlier, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mod parameter...

CVE-2008-4483

Directory traversal vulnerability in index.php in Crux Gallery 1.32 and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the theme parameter...

Directory traversal

Directory traversal vulnerability in ap-save.php in Atarone CMS 1.2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the themechosen parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...

Directory traversal

Directory traversal vulnerability in index.php in SAC.php SACphp, as used in Yerba 6.3 and earlier, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mod parameter...

CVE-2008-4486

Directory traversal vulnerability in index.php in SAC.php SACphp, as used in Yerba 6.3 and earlier, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mod parameter...

MetaGauge 1.0.0.17 Directory Traversal

Title: MetaGauge 1.0.0.17 Directory Traversal ------------------------------------------------------------- Vendor: Hammer Software Vendor URL: www.Hammer-Software.com Vendor Response: Vendor has been notified and has since addressed the issue in the latest software release. Description: A...