ProManager 0.73 (config.php) Local File Inclusion Vulnerability

No description provided by source. -------------------------------------- Pro Manager 0.73 Local File Inclusion Vuln -------------------------------------- http://www.sfr-fresh.com/unix/privat/proManager-0.73.tar.gz -------------------------------------- By : Stack email : Wanted...

HP Online Support Services ActiveX StartApp() arbitrary code execution

Overview The HP Online Support Services ActiveX control contains a method called StartApp. This may allow a remote, unauthenticated attacker to execute local files on a vulnerable system in the context of the local user. Description HP Services provides online product support services including H...

CVE-2008-2534

Directory traversal vulnerability in admin/adminframe.php in Phoenix View CMS Pre Alpha2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the ltarget parameter...

CVE-2008-2483

Directory traversal vulnerability in index.php in Xomol CMS 1.20071213 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the op parameter...

Directory traversal

Directory traversal vulnerability in index.php in Xomol CMS 1.20071213 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the op parameter...

Directory traversal

Directory traversal vulnerability in installmod.php in insanevisions OneCMS 2.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the load parameter in a go action...

CVE-2008-2483

Directory traversal vulnerability in index.php in Xomol CMS 1.20071213 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the op parameter...

CVE-2008-2459

Directory traversal vulnerability in page.php in EntertainmentScript 1.4.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter...

Directory traversal

Directory traversal vulnerability in page.php in EntertainmentScript 1.4.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter...

CVE-2008-2459

CVE-2008-2459 affects EntertainmentScript 1.4.0, where the vulnerable component is page.php. A directory traversal via the page parameter enables remote attackers to include and execute arbitrary local files. Root cause is a directory traversal flaw in the input handling of the page parameter. Im...

CVE-2008-2459

Directory traversal vulnerability in page.php in EntertainmentScript 1.4.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter...

CVE-2008-2415

Directory traversal vulnerability in template/purpletech/baseinclude.php in DigitalHive aka hive 2.0 RC2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-2353

Directory traversal vulnerability in admin.php in GNU/Gallery 1.1.1.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the show parameter...

CVE-2008-2355

Directory traversal vulnerability in index.php in WR-Meeting 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the msnum parameter in a coment event...

Directory traversal

Directory traversal vulnerability in index.php in WR-Meeting 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the msnum parameter in a coment event...

Directory traversal

Directory traversal vulnerability in index.php in Smeego 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang cookie...

CVE-2008-2352

CVE-2008-2352 documents a directory traversal in index.php of Smeego 1.0 where disabling magic_quotes_gpc allows remote attackers to include and execute arbitrary local files via a .. in the lang cookie. The issue is caused by insufficient validation of the cookie value used in file inclusion, en...

CVE-2008-2353

Directory traversal vulnerability in admin.php in GNU/Gallery 1.1.1.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the show parameter...

Directory traversal

Directory traversal vulnerability in cm/graphie.php in Content Management System 0.6.1 for Phprojekt allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmimgpath parameter...

Directory traversal

Multiple directory traversal vulnerabilities in PHP-Fusion Forum Rank System 6 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the settingslocale parameter to 1 forum.php and 2 profile.php in infusions/ranksystem/. NOTE: the provenance of this information i...