CVE-2009-4427

Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...

Directory traversal

Multiple directory traversal vulnerabilities in F3Site 2009 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the GLOBALSnlang parameter to 1 mod/poll.php and 2 mod/new.php...

CVE-2009-4427

Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...

CVE-2009-4426

CVE-2009-4426 affects Ignition 1.2 and describes multiple directory traversal vulnerabilities that permit remote attackers to include and execute arbitrary local files via a .. in the blog parameter to (1) comment.php and (2) view.php when magic_quotes_gpc is disabled. This causes arbitrary local...

CVE-2009-4435

CVE-2009-4435: F3Site 2009 is vulnerable to multiple local file inclusion via the GLOBALS[nlang] parameter in mod/poll.php and mod/new.php, enabling remote attackers to include/execute arbitrary local files. The issue is a directory traversal flaw (LFI) in the affected PHP endpoints. Connected ad...

CVE-2009-4427

Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...

Directory traversal

Directory traversal vulnerability in languagescgi.php in Simple PHP Blog 0.5.1 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the bloglanguage1 parameter...

CVE-2009-4421

CVE-2009-4421 affects Simple PHP Blog

UBUNTU-CVE-2009-3583

Directory traversal vulnerability in the Preferences menu item in SQL-Ledger 2.8.24 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the countrycode field...

CVE-2009-3583

Directory traversal vulnerability in the Preferences menu item in SQL-Ledger 2.8.24 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the countrycode field...

CVE-2009-3583

Directory traversal vulnerability in the Preferences menu item in SQL-Ledger 2.8.24 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the countrycode field...

Directory traversal

Directory traversal vulnerability in the Preferences menu item in SQL-Ledger 2.8.24 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the countrycode field...

CVE-2009-3583

Directory traversal vulnerability in the Preferences menu item in SQL-Ledger 2.8.24 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the countrycode field...

Path traversal

Multiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 allow remote attackers to include and execute arbitrary local files via a full pathname in the configfile parameter to 1 update08.php or 2 update10.php. NOTE: in some environments, this can be leveraged for remote file inclusion...

CVE-2009-3702

Multiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 allow remote attackers to include and execute arbitrary local files via a full pathname in the configfile parameter to 1 update08.php or 2 update10.php. NOTE: in some environments, this can be leveraged for remote file inclusion...

Kiwi Syslog Server Web Access Login Username Enumeration

Kiwi Syslog Web Access is installed on the remote host. The installed version responds with different error messages when an user attempts to login with existent and non-existent accounts. A remote unauthenticated attacker may exploit this vulnerability to enumerate valid users for the remote web...

OpenJDK zoneinfo file existence information leak (6824265)

The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo aka tz files, aka Bug Id 6824265...

Kiwi Syslog Server Information Disclosure Weakness and Vulnerability

Kiwi Syslog Server is prone to an information-disclosure weakness and vulnerability. 1 The weakness is due to the Web Access login page displaying different messages when invalid usernames or passwords are submitted. This can be exploited to enumerate user accounts. 2 A security issue is due to t...

Design/Logic Flaw

Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 on Windows allows remote attackers to obtain the names of local files via unknown vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-482...

CVE-2009-3951

CVE-2009-3951 affects the Adobe Flash Player ActiveX control and Adobe AIR on Windows. It allows remote attackers to obtain the names of local files due to an incomplete fix for CVE-2008-4820, before versions Flash Player for Windows 10.0.42.34 and AIR 1.5.3. Practically, exploitation would revea...