Directory traversal

Dynamic variable evaluation vulnerability in lists/admin.php in phpList 2.10.8 and earlier, when registerglobals is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the SERVERConfigFile parameter to admin/index.php...

Mozilla Foundation Security Advisory 2009-04

Mozilla Foundation Security Advisory 2009-04 Title: Chrome privilege escalation via local .desktop files Impact: Moderate Announced: February 3, 2009 Reporter: Georgi Guninski Products: Firefox, SeaMonkey Fixed in: Firefox 3.0.6 Description Mozilla security researcher Georgi Guninski reported tha...

CVE-2009-0423

CVE-2009-0423 describes a directory traversal vulnerability in the PHPPA (Php Photo Album) 0.8 BETA release. An attacker can exploit improper handling in index.php to cause local file inclusion via a .. (dot dot) in the preview parameter, enabling arbitrary local file access or execution. Impact ...

seamonkey security update

CentOS Errata and Security Advisory CESA-2009:0257 Updated seamonkey packages that fix security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web...

Firefox local file stealing with SessionStore

components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type="file" during tab restoration, which allows user-assisted remote attackers to read arbitrary files on a client machine via a crafted INPUT element...

Directory traversal

Directory traversal vulnerability in scr/form.php in openElec 3.01 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the obj parameter...

Directory traversal

Directory traversal vulnerability in post.php in SiteXS CMS 0.1.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the type parameter...

CVE-2009-0330

Directory traversal vulnerability in index.php in Simple Content Management System SCMS 1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter...

CVE-2009-0330

Directory traversal vulnerability in index.php in Simple Content Management System SCMS 1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter...

Multiple Vulnerabilities in PHP iCalendar

PHP iCalendar is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpicalendar:phpicalendar";...

Directory traversal

Directory traversal vulnerability in defs.php in PHPcounter 1.3.2 and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the l parameter...

CVE-2008-5993

Directory traversal vulnerability in image.php in Barcode Generator 1D barcodegen 2.0.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the code parameter...

CVE-2008-5968

Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cookielanguage parameter in a phpicalendar cookie, a different vector than CVE-2006-1292...

Directory traversal

Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cookielanguage parameter in a phpicalendar cookie, a different vector than CVE-2006-1292...

CVE-2008-5968

CVE-2008-5968 affects PHP iCalendar 2.24 and earlier. It is a directory traversal vulnerability in print.php that allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cookie_language parameter of a phpicalendar_* cookie. This is a different vector than CV...

Directory traversal

Directory traversal vulnerability in index.php in BNCwi 1.04 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the newlanguage parameter...

CVE-2008-5948

Directory traversal vulnerability in index.php in BNCwi 1.04 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the newlanguage parameter...

Directory traversal

Directory traversal vulnerability in library/setup/rpc.php in Gravity Getting Things Done GTD 0.4.5 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the objectname parameter...

CVE-2008-5953

CVE-2008-5953 is a directory traversal vulnerability affecting the KTP Computer Customer Database (KTPCCD) CMS. When magic_quotes_gpc is disabled, a remote attacker can include and execute arbitrary local files by supplying a .. (dot dot) path in the p parameter of the default URI. This leads to ...

CVE-2008-5953

Directory traversal vulnerability in KTP Computer Customer Database KTPCCD CMS, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter to the default URI...