Directory traversal

Directory traversal vulnerability in ap-save.php in Atarone CMS 1.2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the themechosen parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...

Directory traversal

Directory traversal vulnerability in index.php in SAC.php SACphp, as used in Yerba 6.3 and earlier, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mod parameter...

CVE-2008-4486

Directory traversal vulnerability in index.php in SAC.php SACphp, as used in Yerba 6.3 and earlier, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mod parameter...

MetaGauge 1.0.0.17 Directory Traversal

Title: MetaGauge 1.0.0.17 Directory Traversal ------------------------------------------------------------- Vendor: Hammer Software Vendor URL: www.Hammer-Software.com Vendor Response: Vendor has been notified and has since addressed the issue in the latest software release. Description: A...

Directory traversal

Directory traversal vulnerability in TalkBack 2.3.6 and 2.3.6.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter to comments.php, a different vector than CVE-2008-3371...

CVE-2008-4346

CVE-2008-4346 : TalkBack has a directory traversal vulnerability allowing remote attackers to include and execute arbitrary local files via the language parameter. Affected versions include TalkBack 2.3.5 and other versions before 2.3.6.2 (and similar vector in comments.php as noted in CVE-2008-4...

CVE-2008-4331

Directory traversal vulnerability in library/pagefunctions.inc.php in phpOCS 0.1 beta3 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the act parameter to index.php...

Directory traversal

Directory traversal vulnerability in library/pagefunctions.inc.php in phpOCS 0.1 beta3 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the act parameter to index.php...

CVE-2008-4330

Directory traversal vulnerability in index.php in LanSuite 3.3.2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the design parameter...

KLA10097 WLF vulnerability in CDBurnerXP

An unspecified vulnerability was found in CDBurnerXP. By exploiting this vulnerability malicious users can overwrite arbitrary files. This vulnerability can be exploited from the network at a point related to NMS DVD Burning SDK. Original advisories vulnerability description Exploitation Public...

Directory traversal

Directory traversal vulnerability in includes/xml.php in the Netenberg Fantastico De Luxe module before 2.10.4 r19 for cPanel, when cPanel PHP Register Globals is enabled, allows remote authenticated users to include and execute arbitrary local files via a .. dot dot or absolute pathname in the...

Directory traversal

Multiple directory traversal vulnerabilities in index.php in Zanfi CMS lite 1.2 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 flag and 2 inc parameters...

Directory traversal

Multiple directory traversal vulnerabilities in Pluck CMS 4.5.2 on Windows allow remote attackers to include and execute arbitrary local files via a ..\ dot dot backslash in the 1 blogpost, 2 cat, and 3 file parameters to data/inc/themes/predefinedvariables.php, as reachable through index.php; an...

CVE-2008-3851

Multiple directory traversal vulnerabilities in Pluck CMS 4.5.2 on Windows allow remote attackers to include and execute arbitrary local files via a ..\ dot dot backslash in the 1 blogpost, 2 cat, and 3 file parameters to data/inc/themes/predefinedvariables.php, as reachable through index.php; an...

Directory traversal

Multiple directory traversal vulnerabilities in Freeway 1.4.1.171, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter to 1 includes/eventsapplicationtop.php; 2 english/account.php, 3 french/account.php, a...

fujitsu-traverse.txt

Fujitsu Web-Based Admin View Directory Traversal Vulnerability Version: 2.1.2 on Solaris, Other versions may vulnerable Vulnerability: Directory Traversal Risk: Critical Description: Due to insufficient control of user inputs, Fujitsu Web-based admin view reveals content of files residing in...

CVE-2008-3677

Directory traversal vulnerability in includes/eventsapplicationtop.php in Freeway before 1.4.2.197 allows remote attackers to include and execute arbitrary local files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in includes/eventsapplicationtop.php in Freeway before 1.4.2.197 allows remote attackers to include and execute arbitrary local files via unspecified vectors...

CVE-2008-3677

Directory traversal vulnerability in includes/eventsapplicationtop.php in Freeway before 1.4.2.197 allows remote attackers to include and execute arbitrary local files via unspecified vectors...

java-1.5.0 Privilege escalation via unstrusted applet and application

Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted 1 application or 2 applet, as demonstrated by an application or applet that grants...