Directory traversal

Directory traversal vulnerability in Chilek Content Management System aka ChiCoMaS 2.0.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the operation parameter to the default URI under install/...

CVE-2008-2017

Directory traversal vulnerability in Chilek Content Management System aka ChiCoMaS 2.0.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the operation parameter to the default URI under install/...

GLSA-200804-28 : JRockit: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200804-28 JRockit: Multiple vulnerabilities Because of sharing the same codebase, JRockit is affected by the vulnerabilities mentioned in GLSA 200804-20. Impact : A remote attacker could entice a user to run a specially crafted...

CVE-2008-1962

Multiple directory traversal vulnerabilities in Aterr 0.9.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 class parameter to include/functions.inc.php and the 2 file parameter to include/common.inc.php...

Directory traversal

Multiple directory traversal vulnerabilities in Aterr 0.9.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 class parameter to include/functions.inc.php and the 2 file parameter to include/common.inc.php...

CVE-2008-1962

CVE-2008-1962 affects Aterr 0.9.1 and is caused by directory traversal that allows remote attackers to include and execute arbitrary local files. The vulnerability is rooted in unsafely handling user-supplied input in two PHP include points: (1) the class parameter to include/functions.inc.php an...

CVE-2008-1962

Multiple directory traversal vulnerabilities in Aterr 0.9.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 class parameter to include/functions.inc.php and the 2 file parameter to include/common.inc.php...

Directory traversal

Multiple directory traversal vulnerabilities in cpCommerce 1.1.0 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the language parameter in a language action to the default URI, which is not properly handled in actions/language.act.php, or 2 the action...

CVE-2008-1908

Multiple directory traversal vulnerabilities in cpCommerce 1.1.0 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the language parameter in a language action to the default URI, which is not properly handled in actions/language.act.php, or 2 the action...

CVE-2008-1908

Multiple directory traversal vulnerabilities in cpCommerce 1.1.0 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the language parameter in a language action to the default URI, which is not properly handled in actions/language.act.php, or 2 the action...

Directory traversal

Directory traversal vulnerability in modules/threadstop/threadstop.php in ExBB Italia 0.22 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the exbbdefaultlang parameter...

CVE-2008-1861

Directory traversal vulnerability in modules/threadstop/threadstop.php in ExBB Italia 0.22 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the exbbdefaultlang parameter...

Directory traversal

Directory traversal vulnerability in forum/kietu/libs/calendrier.php in Dragoon 0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the callng parameter...

CVE-2008-1798

The CVE-2008-1798 issue affects Dragoon 0.1, specifically the calendrier.php routine in forum/kietu/libs. An attacker can craft a value for cal[lng] containing a .. sequence to trigger directory traversal, enabling the inclusion and execution of arbitrary local files. This is a server-side file i...

Directory traversal

Multiple directory traversal vulnerabilities in index.php in Ksemail allow remote attackers to read arbitrary local files via a .. dot dot in the 1 language and 2 lang parameters...

CVE-2008-1751

Multiple directory traversal vulnerabilities in index.php in Ksemail allow remote attackers to read arbitrary local files via a .. dot dot in the 1 language and 2 lang parameters...

swfdec -- exposure of sensitive information

Secunia reports: A vulnerability has been reported in swfdec, which can be exploited by malicious people to disclose sensitive information. The vulnerability is caused due to swfdec not properly restricting untrusted sandboxes from reading local files, which can be exploited to disclose the conte...

Directory traversal

Directory traversal vulnerability in makepost.php in DaZPHPNews 0.1-1, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the prefixdir parameter...

CVE-2008-1696

Directory traversal vulnerability in makepost.php in DaZPHPNews 0.1-1, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the prefixdir parameter...

Prozilla Forum Service (forum.php forum) SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ Prozilla Forum Service SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By:...