CVE-2006-0882

Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote attackers to include arbitrary local files via the otherTemplate parameter to index.php...

Cross site request forgery (csrf)

process.php in DocMGR 0.54.2 does not initialize the $siteModInfo variable when a direct request is made, which allows remote attackers to include arbitrary local files or possibly remote files via a modified includeModule and siteModInfo variable...

GLSA-200602-07 : Sun JDK/JRE: Applet privilege escalation

The remote host is affected by the vulnerability described in GLSA-200602-07 Sun JDK/JRE: Applet privilege escalation Applets executed using JRE or JDK can use 'reflection' APIs functions to elevate its privileges beyond the sandbox restrictions. Adam Gowdiak discovered five vulnerabilities that...

Directory traversal

Multiple directory traversal vulnerabilities in install.php in CPG-Nuke Dragonfly CMS aka CPG Dragonfly CMS 9.0.6.1 allow remote attackers to include and execute arbitrary local files via directory traversal sequences and a NUL %00 character in 1 the newlang parameter and 2 the installlang...

CVE-2006-0494

Directory traversal vulnerability in MyBB aka MyBulletinBoard 1.02 allows local users with MyBB administrative privileges to include and possibly execute arbitrary local files via directory traversal sequences and a nul %00 character in the plugin parameter...

Directory traversal

Directory traversal vulnerability in MyBB aka MyBulletinBoard 1.02 allows local users with MyBB administrative privileges to include and possibly execute arbitrary local files via directory traversal sequences and a nul %00 character in the plugin parameter...

Sun Java JRE sandbox protection bypass

Few vulnerabilities allow applets to write local files and execute applications...

CVE-2005-4212

Directory traversal vulnerability in coinincludes/db.php in phpCOIN 1.2.2 allows remote attackers to read arbitrary local files via ".." dot dot sequences in the $CCFGPKGPATHDBSE variable...

JVN#15972537 Fujitsu Java Runtime Environment reflection API vulnerability

Impact If a user downloads and executes a specially crafted applet, a remote attacker could access local files with the elevated privileges or execute arbitrary code with the privilege of the user running the applet. Solution Products Affected For more information, refer to the vendor's website...

CVE-2005-4086

Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management SugarCRM 4.0 beta and earlier allows remote attackers to include arbitrary local files via ".." sequences in the beanFiles array parameter...

CVE-2005-3936

PHP file include vulnerability in SocketKB 1.1.0 and earlier allows remote attackers to include arbitrary local files via the f parameter...

CVE-2005-3936

PHP file include vulnerability in SocketKB 1.1.0 and earlier allows remote attackers to include arbitrary local files via the f parameter...

CVE-2005-3910

merchants/index.php in Post Affiliate Pro 2.0.4 and earlier, with magicquotesgpc disabled, allows remote attackers to include arbitrary local files via the md parameter, possibly due to a directory traversal vulnerability...

[SA17748] Sun Java JRE Sandbox Security Bypass Vulnerabilities

TITLE: Sun Java JRE Sandbox Security Bypass Vulnerabilities SECUNIA ADVISORY ID: SA17748 VERIFY ADVISORY: http://secunia.com/advisories/17748/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Sun Java SDK 1.4.x http://secunia.com/product/1661/ Sun Java SDK 1.3.x...

CVE-2004-2601: Undefined Security Weakness

PHP remote file inclusion vulnerability in UberTec Help Center Live HCL allows remote attackers to read local files and possibly execute PHP code via a URL in the SKINinner parameter to inc/skin.php...

CVE-2005-3680

The CVE-2005-3680 entry concerns XOOPS 2.2.3. It describes a directory traversal/Local File Inclusion in editor_registry.php, exploitable via a .. in the xoopsConfig[language] parameter, allowing remote attackers to read or include arbitrary local files. The affected component is XOOPS 2.2.3 (edi...

CVE-2005-3579

ts.exe aka ts.cgi in Walla TeleSite 3.0 and earlier allows remote attackers to access arbitrary local files via the querystring...

CVE-2005-3579

ts.exe aka ts.cgi in Walla TeleSite 3.0 and earlier allows remote attackers to access arbitrary local files via the querystring...

XOOPS xoopsConfig[language] Parameter Local File Inclusion (XOOPS_WFd205_xpl)

The remote installation of XOOPS fails to sanitize user-supplied input to the 'xoopsConfiglanguage' parameter of several xoopseditor scripts before using it in PHP 'include' functions. An unauthenticated attacker may be able to leverage these issues to read arbitrary local files and even execute...

CVE-2003-1283: Undefined Security Weakness

KaZaA Media Desktop KMD 2.0 launches advertisements in the Internet Explorer IE local security zone, which could allow remote attackers to view local files and possibly execute arbitrary code...