Directory traversal

Directory traversal vulnerability in data/inc/lib/pcltar.lib.php in Pluck 4.5.3, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the gpcltarlibdir parameter...

CVE-2008-6265

CVE-2008-6265 describes a directory traversal vulnerability in the Portfolio module of Cyberfolio (version 7.12.2 and earlier). The flaw resides in the portfolio/css.php component, where an attacker can abuse the theme parameter (using ..) to cause local file inclusion and execute arbitrary local...

CVE-2009-0674

images/captcha.php in Raven Web Services RavenNuke 2.30, when registerglobals and displayerrors are enabled, allows remote attackers to determine the existence of local files by sending requests with full pathnames in the aFonts array parameter, and then observing the error messages, which differ...

Directory traversal

Multiple directory traversal vulnerabilities in LightBlog 9.8, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 username parameter to viewmember.php, 2 usernamepost parameter to login.php, and the 3 Lightblogusername...

CVE-2008-6167

Directory traversal vulnerability in search.php in miniPortail 2.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lng parameter...

CVE-2009-0592

Multiple directory traversal vulnerabilities in PNphpBB2 1.2i and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the ModName parameter to 1 adminwords.php, 2 admingroupsreapir.php, 3 adminsmilies.php, 4 adminranks.php, 5 adminstyles.php, and 6...

Directory traversal

Directory traversal vulnerability in skysilver/login.tpl.php in phpSkelSite 1.4, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the TplSuffix parameter...

Directory traversal

Multiple directory traversal vulnerabilities in PNphpBB2 1.2i and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the ModName parameter to 1 adminwords.php, 2 admingroupsreapir.php, 3 adminsmilies.php, 4 adminranks.php, 5 adminstyles.php, and 6...

CVE-2009-0592

Multiple directory traversal vulnerabilities in PNphpBB2 1.2i and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the ModName parameter to 1 adminwords.php, 2 admingroupsreapir.php, 3 adminsmilies.php, 4 adminranks.php, 5 adminstyles.php, and 6...

Directory traversal

Directory traversal vulnerability in send.php in Ninja Designs Mailist 3.0, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the load parameter. NOTE: some of these details are obtained from...

CVE-2009-0515

Directory traversal vulnerability in checklang.php in Yet Another NOCC YANOCC 0.1.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

Directory traversal

Directory traversal vulnerability in checklang.php in Yet Another NOCC YANOCC 0.1.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

Directory traversal

Multiple directory traversal vulnerabilities in WebFrame 0.76 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 currentmod and 2 LANG parameters to mod/index.php...

CVE-2009-0514

CVE-2009-0514 affects WebFrame 0.76 with directory traversal in mod/index.php (parameters: currentmod, LANG). Exploitation enables remote inclusion and execution of arbitrary local files. Base CVSS 2.0 score 7.5 (HIGH); attack vector NETWORK, no authentication required. No remediation details pro...

CVE-2009-0514

Multiple directory traversal vulnerabilities in WebFrame 0.76 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 currentmod and 2 LANG parameters to mod/index.php...

Directory traversal

Multiple directory traversal vulnerabilities in AJA Portal 1.2 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter to admin/case.php in the 1 ContactPlus and 2 Reviews modules, and 3 the modulename parameter to...

Directory traversal

Directory traversal vulnerability in admin/modules/aa/preview.php in Syntax Desktop 2.7 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the synTarget parameter...

CVE-2008-6090

Directory traversal vulnerability in members.php in ScriptsEz Mini Hosting Panel allows remote attackers to read arbitrary local files via a .. dot dot in the dir parameter in a view action...

Directory traversal

Directory traversal vulnerability in members.php in ScriptsEz Mini Hosting Panel allows remote attackers to read arbitrary local files via a .. dot dot in the dir parameter in a view action...

CVE-2008-6090

Directory traversal vulnerability in members.php in ScriptsEz Mini Hosting Panel allows remote attackers to read arbitrary local files via a .. dot dot in the dir parameter in a view action...