Directory traversal

Multiple directory traversal vulnerabilities in HomePH Design 2.10 RC2, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 thumbtemplate parameter to a admin/templates/templatethumbnail.php, and the 2...

Directory traversal

Directory traversal vulnerability in phpi/rss.php in Ourvideo CMS 9.5, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the prefix parameter...

CVE-2008-2966

Directory traversal vulnerability in viewprofile.php in JaxUltraBB 2.0 and earlier allows remote attackers to read arbitrary local files via a .. dot dot in the user parameter. party information...

CVE-2008-2978

CVE-2008-2978 concerns a directory traversal vulnerability in phpi/rss.php of Ourvideo CMS 9.5 that is exploitable when PHP register_globals is enabled. The issue allows remote attackers to include and execute arbitrary local files by manipulating directory traversal sequences in the prefix param...

CVE-2008-2974

MM Chat 1.5 is affected by a Directory Traversal in chatconfig.php. When register_globals is enabled, remote attackers can use directory traversal sequences in the currentlang parameter to include and execute local files. CVSS v2 base score is 6.8 (MEDIUM). Affected: MM Chat 1.5; exploit details ...

CVE-2008-2985

CVE-2008-2985 describes a directory traversal vulnerability in CMReams CMS 1.3.1.1 Beta 2, exposed when register_globals is enabled. An attacker can cause the application to include and execute arbitrary local files by supplying directory traversal sequences in the page_language parameter of load...

CVE-2008-2961

CVE-2008-2961 affects CMS Mini 0.2.2. The vulnerability is a directory traversal in view/index.php, where an attacker can read arbitrary local files by supplying a .. sequence in the path parameter and the p parameter. Impact is partial confidentiality loss (read access to local files). The NVD e...

Firefox arbitrary file disclosure

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to force the upload of arbitrary local files from a client computer via vectors involving originalTarget and DOM Range...

Arbitrary file upload via originalTarget and DOM Range — Mozilla

Opera Software reported a vulnerability which allows malicious content to force the browser into uploading local files to the remote server. This could be used by an attacker to steal files from known locations on a victim's computer...

Directory traversal

Directory traversal vulnerability in func.php in Devalcms 1.4a, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the currentpath parameter, in conjunction with certain ... triple dot and ..... sequences in the currentfile...

CVE-2008-2913

Directory traversal vulnerability in func.php in Devalcms 1.4a, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the currentpath parameter, in conjunction with certain ... triple dot and ..... sequences in the currentfile...

BMP image parser vulnerability

The BMP image parser in Sun Java Development Kit JDK before 1.5.011-b03 and 1.6.x before 1.6.001-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.214 and earlier, and SDK and JRE 1.3.119 and earlier, when running on Unix/Linux systems,...

CVE-2008-2887

Directory traversal vulnerability in index.php in chaozz@work FubarForum 1.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-2895

Directory traversal vulnerability in index.php in AproxEngine 5.1.0.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

Directory traversal

Directory traversal vulnerability in index.php in chaozz@work FubarForum 1.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

Directory traversal

Directory traversal vulnerability in index.php in FireAnt 1.3 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

Directory traversal

Directory traversal vulnerability in index.php in AproxEngine 5.1.0.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-2887

Directory traversal vulnerability in index.php in chaozz@work FubarForum 1.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-2876

Directory traversal vulnerability in index.php in mUnky 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the zone parameter...

Directory traversal

Directory traversal vulnerability in index.php in mUnky 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the zone parameter...