Directory traversal

module.php in ezContents 2.0.3 allows remote attackers to bypass the directory traversal protection mechanism to include and execute arbitrary local files via "....//" doubled dot dot slash sequences in the link parameter, which is not properly filtered using the strreplace function...

Directory traversal

Multiple directory traversal vulnerabilities in dit.cms 1.3, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the path parameter to index.php in 1 install/, 2 menus/leftrightslideopen/, 3 menus/sidepullout/, 4...

CVE-2009-2787

CVE-2009-2787 is a directory traversal vulnerability in the Reputation plugin for PunBB (versions 2.2.4, 2.2.3, 2.0.4 and earlier). The issue arises when register_globals is enabled and magic_quotes_gpc is disabled, allowing remote attackers to include and execute arbitrary local files via a .. i...

CVE-2009-2792

Directory traversal vulnerability in plugings/pagecontent.php in Really Simple CMS RSCMS 0.3a allows remote attackers to include and execute arbitrary local files via a .. dot dot in the PT parameter...

Directory traversal

Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the scriptpathshow parameter in a GoAhead action. NOTE: this issue only...

CVE-2008-6926

Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the scriptpathshow parameter in a GoAhead action. NOTE: this issue only...

CVE-2008-6926

Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the scriptpathshow parameter in a GoAhead action. NOTE: this issue only...

Directory traversal

Multiple directory traversal vulnerabilities in 2532designs 2532|Gigs 1.2.2 Stable, when registerglobals is enabled and magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter to 1 settings.php, 2 deleteuser.php, 3...

Waverider Systems Perlshop - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/43158/info Perlshop is prone to multiple input-validation vulnerabilities including a nondescript input-validation vulnerability, multiple cross-site scripting vulnerabilities, and a directory-traversal vulnerability because it fails to sufficiently...

Waverider Systems Perlshop - Multiple Input Validation Vulnerabilities

Waverider Systems Perlshop - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/43158/info Perlshop is prone to multiple input-validation vulnerabilities including a nondescript input-validation vulnerability, multiple cross-site scripting vulnerabilities, and a...

Directory traversal

Multiple directory traversal vulnerabilities in XOOPS 2.3.1, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the xoopsConfiglanguage parameter to 1 blocks.php and 2 main.php in xoopslib/modules/protector/...

CVE-2008-6884

Multiple directory traversal vulnerabilities in XOOPS 2.3.1, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the xoopsConfiglanguage parameter to 1 blocks.php and 2 main.php in xoopslib/modules/protector/...

CVE-2009-2611

Directory traversal vulnerability in infusions/lastseenuserspanel/lastseenuserspanel.php in MyFusion aka MyF 6 Beta, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the settingslocale parameter...

Directory traversal

Directory traversal vulnerability in infusions/lastseenuserspanel/lastseenuserspanel.php in MyFusion aka MyF 6 Beta, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the settingslocale parameter...

CVE-2008-6878

Directory traversal vulnerability in admin/includes/languages/english.php in Zen Cart 1.3.8a, 1.3.8, and earlier, when .htaccess is not supported, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the SESSIONlanguage parameter. NOTE: the vendor disputes this...

CVE-2009-2552

Multiple directory traversal vulnerabilities in comments.php in Super Simple Blog Script 2.5.4 allow remote attackers to overwrite, include, and execute arbitrary local files via the entry parameter...

CVE-2009-2449

Directory traversal vulnerability in maillinglist/admin/changeconfig.php in ADbNewsSender before 1.5.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pathtolang parameter...

Directory traversal

Directory traversal vulnerability in maillinglist/setup/step1.php.inc in ADbNewsSender before 1.5.6, and 2.0 before RC2, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pathtolang parameter to setup/index.php...

xscreensaver 5.01 - Arbitrary File Disclosure Symlink

xscreensaver local arbitrary file disclosure | symlink attack The �xscreensaver� program distributed normally with Xorg can be abused to disclose local files owned by other users also of the root account. Xscreensaver has the setuid bit on by default Example: Opensolaris The xscreensaver...

Directory traversal

Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...