Directory traversal

Directory traversal vulnerability in login.php in Cuteflow Bin 1.5.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

CVE-2008-1493

Directory traversal vulnerability in login.php in Cuteflow Bin 1.5.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

CVE-2008-1493

Directory traversal vulnerability in login.php in Cuteflow Bin 1.5.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

Directory traversal

Multiple directory traversal vulnerabilities in the Default theme in Exero CMS 1.0.1 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the theme parameter to 1 index.php, 2 editpassword.php, and 3 avatar.php in usercp/; 4 custompage.php; 5...

KLA10375 WLF vulnerability in UltraEdit

A directory traversal vulnerability was found in UltrEdit. By exploiting this vulnerability malicious users can create & overwrite arbitrary files. This vulnerability can be exploited remotely via a specially designed response. Original advisories - Related products UltraEdit CVE list CVE-2008-27...

CVE-2008-1324

Multiple directory traversal vulnerabilities in index.php in Travelsized CMS 0.4.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 pageid and 2 language parameters. NOTE: this might be the same issue as CVE-2008-1325...

Directory traversal

Multiple directory traversal vulnerabilities in index.php in Travelsized CMS 0.4.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 pageid and 2 language parameters. NOTE: this might be the same issue as CVE-2008-1325...

CVE-2008-1324

Multiple directory traversal vulnerabilities in index.php in Travelsized CMS 0.4.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 pageid and 2 language parameters. NOTE: this might be the same issue as CVE-2008-1325...

CVE-2008-1324

CVE-2008-1324 affects Travelsized CMS 0.4.1. The vulnerability is a directory-traversal flaw in index.php allowing remote attackers to include and execute arbitrary local files via a .. in the page_id and language parameters. This is supported by the NVD description and related entries that refer...

BMP image parser vulnerability

The BMP image parser in Sun Java Development Kit JDK before 1.5.011-b03 and 1.6.x before 1.6.001-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.214 and earlier, and SDK and JRE 1.3.119 and earlier, when running on Unix/Linux systems,...

CVE-2008-1231

Directory traversal vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to include and execute arbitrary local .jsp files, and obtain sensitive information, via a .. dot dot in the editor parameter...

java-1.5.0 Privilege escalation via unstrusted applet and application

Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted 1 application or 2 applet, as demonstrated by an application or applet that grants...

Directory traversal

Directory traversal vulnerability in include/body.inc.php in Linux Web Shop LWS php Download Manager 1.0 and 1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the content parameter...

CVE-2008-1042

Directory traversal vulnerability in include/body.inc.php in Linux Web Shop LWS php Download Manager 1.0 and 1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the content parameter...

Directory traversal

Directory traversal vulnerability in viewmember.php in Public Warehouse LightBlog 9.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the username parameter...

CVE-2008-0840

Directory traversal vulnerability in viewmember.php in Public Warehouse LightBlog 9.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the username parameter...

CVE-2008-0840

Directory traversal vulnerability in viewmember.php in Public Warehouse LightBlog 9.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the username parameter...

Directory traversal

Directory traversal vulnerability in index.php in Scribe 0.2 allows remote attackers to read arbitrary local files via a .. dot dot in the page parameter...

Directory traversal

Multiple directory traversal vulnerabilities in freePHPgallery 0.6 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the lang cookie to 1 comment.php, 2 index.php, and 3 show.php...

CVE-2008-0818

Multiple directory traversal vulnerabilities in freePHPgallery 0.6 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the lang cookie to 1 comment.php, 2 index.php, and 3 show.php...