Directory traversal

Directory traversal vulnerability in admin/popup.php in Betsy CMS 3.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the popup parameter...

Google Chrome Multiple Vulnerabilities - Nov09

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnnov09.nasl 5055 2017-01-20 14:08:39Z teissa $ Google Chrome Multiple Vulnerabilities - Nov09 Authors: Sharath S Copyright: Copyright c 2009 SecPod,...

OpenJDK zoneinfo file existence information leak (6824265)

The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo aka tz files, aka Bug Id 6824265...

Ubuntu 8.10 / 9.04 : qt4-x11 vulnerabilities (USN-857-1)

It was discovered that QtWebKit did not properly handle certain SVGPathList data structures. If a user were tricked into viewing a malicious website, an attacker could exploit this to execute arbitrary code with the privileges of the user invoking the program. CVE-2009-0945 Several flaws were...

CVE-2009-3884

The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo aka tz files, aka Bug Id 6824265...

CVE-2009-3884

The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo aka tz files, aka Bug Id 6824265...

Windows Media Player Plugin: Local File Detection Vulnerability

No description provided by source. Windows Media Player Plugin: Local File Detection Vulnerability A design flaw in Windows Media Player 11 allows a remote attacker to determine the \ presence of local files programs, documents, etc.. I sent an e-mail to Microsoft \ nearly a year ago but they nev...

Directory traversal

Directory traversal vulnerability in include/processor.php in Greenwood PHP Content Manager 0.3.2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the contentpath parameter...

Directory traversal

Multiple directory traversal vulnerabilities in GenCMS 2006 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 p parameter to show.php and the 2 Template parameter to admin/pages/SiteNew.php...

CVE-2009-3824

Directory traversal vulnerability in include/processor.php in Greenwood PHP Content Manager 0.3.2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the contentpath parameter...

CVE-2009-3825

GenCMS 2006 contains multiple directory traversal flaws that allow remote attackers to include and execute arbitrary local files via the dot-dot (..) in the (1) p parameter to show.php and (2) the Template parameter to admin/pages/SiteNew.php. The affected software and parameters are stated in CV...

Directory traversal

Directory traversal vulnerability in www/index.php in Sahana 0.6.2.2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mod parameter...

phpCMS 2008 - 'download.php' Information Disclosure

source: https://www.securityfocus.com/bid/42514/info PHPCMS2008 is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attacker can exploit this issue to download local files in the context of the webserver process. This may allow the...

CVE-2009-3694

Directory traversal vulnerability in config/config.php in ezRecipe-Zee 91, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cfgprePath parameter...

Directory traversal

Directory traversal vulnerability in config/config.php in ezRecipe-Zee 91, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cfgprePath parameter...

CVE-2009-3694

CVE-2009-3694 affects ezRecipe-Zee 91; a directory traversal flaw in config/config.php allows remote inclusion and execution of local files via a .. in cfg[prePath] when register_globals is enabled. Root cause is improper handling of user-controlled path input enabling local file inclusion. The c...

CVE-2009-3694

Directory traversal vulnerability in config/config.php in ezRecipe-Zee 91, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cfgprePath parameter...

CVE-2009-3515

Directory traversal vulnerability in dnetadmin/index.php in d.net CMS allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the type parameter...

Directory traversal

Multiple directory traversal vulnerabilities in MUJE CMS 1.0.4.34 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 class parameter to admin.php and the 2 url parameter to install/install.php; and allow remote authenticated administrators to read...

Directory traversal

Directory traversal vulnerability in dnetadmin/index.php in d.net CMS allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the type parameter...