CVE-2008-6361

CVE-2008-6361 describes a directory traversal vulnerability in the lang parameter of index.php for InSun Feed CMS 1.7.3 19Beta. The root cause is directory traversal sequences that allow remote attackers to include and execute arbitrary local files. Reported impact focuses on partial confidential...

Directory traversal

Directory traversal vulnerability in download.php in Text Lines Rearrange Script 1.0, when registerglobals is enabled, allows remote attackers to read arbitrary local files via directory traversal sequences in the filename parameter...

Directory traversal

Directory traversal vulnerability in addedit-render.php in phpAddEdit 1.3, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a URL in the editform parameter. NOTE: PHP remote file inclusion attacks are also likely...

Directory traversal

Directory traversal vulnerability in conf/php-core/common-tpl-vars.php in PHPmyGallery 1.5 beta allows remote attackers to include and execute arbitrary local files via a .. dot dot in the conflang parameter, a different issue than CVE-2008-6318. NOTE: this might be the same issue as CVE-2008-631...

CVE-2008-6317

Directory traversal vulnerability in conf/php-core/common-tpl-vars.php in PHPmyGallery 1.5 beta allows remote attackers to include and execute arbitrary local files via a .. dot dot in the conflang parameter, a different issue than CVE-2008-6318. NOTE: this might be the same issue as CVE-2008-631...

CVE-2009-0729

Multiple directory traversal vulnerabilities in Page Engine CMS 2.0 Basic and Pro allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the fPrefix parameter to 1 modules/recentpollinclude.php, 2 modules/logininclude.php, and 3...

Directory traversal

Multiple directory traversal vulnerabilities in Page Engine CMS 2.0 Basic and Pro allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the fPrefix parameter to 1 modules/recentpollinclude.php, 2 modules/logininclude.php, and 3...

Directory traversal

Directory traversal vulnerability in pages/play.php in Free Arcade Script 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the template parameter...

CVE-2009-0729

Multiple directory traversal vulnerabilities in Page Engine CMS 2.0 Basic and Pro allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the fPrefix parameter to 1 modules/recentpollinclude.php, 2 modules/logininclude.php, and 3...

CVE-2009-0731

CVE-2009-0731 is a directory traversal vulnerability affecting Free Arcade Script 1.0. The issue lies in pages/play.php where the template parameter can be exploited with a .. (dot dot) path to include and execute local files. Exploitation details and the affected software are explicitly document...

CVE-2009-0731

Directory traversal vulnerability in pages/play.php in Free Arcade Script 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the template parameter...

CVE-2009-0729

Summary (CVE-2009-0729) : Multiple directory traversal vulnerabilities affect Page Engine CMS 2.0 Basic and Pro. The flaw allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the fPrefix parameter to (1) modules/recent_poll_include.php, (2) mod...

Directory traversal

Directory traversal vulnerability in data/inc/lib/pcltar.lib.php in Pluck 4.5.3, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the gpcltarlibdir parameter...

Directory traversal

Directory traversal vulnerability in portfolio/css.php in Cyberfolio 7.12.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the theme parameter...

CVE-2008-6265

CVE-2008-6265 describes a directory traversal vulnerability in the Portfolio module of Cyberfolio (version 7.12.2 and earlier). The flaw resides in the portfolio/css.php component, where an attacker can abuse the theme parameter (using ..) to cause local file inclusion and execute arbitrary local...

CVE-2009-0674

images/captcha.php in Raven Web Services RavenNuke 2.30, when registerglobals and displayerrors are enabled, allows remote attackers to determine the existence of local files by sending requests with full pathnames in the aFonts array parameter, and then observing the error messages, which differ...

Directory traversal

Multiple directory traversal vulnerabilities in LightBlog 9.8, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 username parameter to viewmember.php, 2 usernamepost parameter to login.php, and the 3 Lightblogusername...

CVE-2008-6167

Directory traversal vulnerability in search.php in miniPortail 2.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lng parameter...

CVE-2009-0592

Multiple directory traversal vulnerabilities in PNphpBB2 1.2i and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the ModName parameter to 1 adminwords.php, 2 admingroupsreapir.php, 3 adminsmilies.php, 4 adminranks.php, 5 adminstyles.php, and 6...

Directory traversal

Directory traversal vulnerability in skysilver/login.tpl.php in phpSkelSite 1.4, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the TplSuffix parameter...