Directory traversal

Multiple directory traversal vulnerabilities in Azucar CMS 1.3 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the VIEW view parameter to 1 index.php, 2 html/sitio/index.php, or 3 src/sistema/vistas/template/tplinicio.php...

Directory traversal

Directory traversal vulnerability in htdocs/install/index.php in XOOPS 2.0.18 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

Directory traversal

Directory traversal vulnerability in index.php in DivideConcept VHD Web Pack 2.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-0609

Directory traversal vulnerability in index.php in DivideConcept VHD Web Pack 2.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

Directory traversal

Multiple directory traversal vulnerabilities in Nilson's Blogger 0.11 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the permalink parameter in core.php, accessed through index.php; and 2 the thispost parameter in comments.php...

CVE-2008-0559

Multiple directory traversal vulnerabilities in Nilson's Blogger 0.11 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the permalink parameter in core.php, accessed through index.php; and 2 the thispost parameter in comments.php...

CVE-2008-0559

CVE-2008-0559 affects Nilson’s Blogger 0.11. The vulnerability is a directory-traversal flaw that allows remote attackers to include and execute arbitrary local files via a .. in two parameters: (1) permalink in core.php (through index.php) and (2) thispost in comments.php. Root cause is improper...

CVE-2008-0559

Multiple directory traversal vulnerabilities in Nilson's Blogger 0.11 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the permalink parameter in core.php, accessed through index.php; and 2 the thispost parameter in comments.php...

Directory traversal

Multiple directory traversal vulnerabilities in Bubbling Library 1.32 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 uri parameter to a yui-menu.tpl.php, b simple.tpl.php, and c advanced.tpl.php in dispatcher/framework/; and the 2 page parameter to d...

CVE-2008-0545

Multiple directory traversal vulnerabilities in Bubbling Library 1.32 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 uri parameter to a yui-menu.tpl.php, b simple.tpl.php, and c advanced.tpl.php in dispatcher/framework/; and the 2 page parameter to d...

CVE-2008-0545

CVE-2008-0545 describes multiple directory traversal vulnerabilities in Bubbling Library 1.32. The issue allows remote attackers to include and execute arbitrary local files via a .. in the uri parameter passed to dispatcher/framework/ templates (yui-menu.tpl.php, simple.tpl.php, advanced.tpl.php...

Directory traversal

Directory traversal vulnerability in install.php in Clansphere 2007.4.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

CVE-2008-0488

Directory traversal vulnerability in tseekdir.cgi in VB Marketing allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the location parameter...

CVE-2008-0501

Directory traversal vulnerability in phpMyClub 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pagecourante parameter to the top-level URI...

CVE-2008-0501

CVE-2008-0501 is a directory traversal vulnerability affecting phpMyClub 0.0.1. The flaw allows remote attackers to include and execute arbitrary local files by injecting .. in the page_courante parameter at the top-level URI. The NVD records a CVSS v2 base score of 5.8 (MEDIUM) with network atta...

CVE-2008-0488

Directory traversal vulnerability in tseekdir.cgi in VB Marketing allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the location parameter...

Directory traversal

Directory traversal vulnerability in index.php in SetCMS 3.6.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the set parameter, as demonstrated by sending a certain CLIENTIP HTTP header in an enter action to index.php, and injecting PHP sequences into...

CVE-2008-0478

CVE-2008-0478 affects SetCMS 3.6.5 with a directory traversal flaw in index.php. The vulnerability arises from including locally stored files via a crafted set parameter, enabling arbitrary code execution when a PHP sequence is injected into files/enter.set and then included by index.php. The att...

Directory traversal

Directory traversal vulnerability in function/sources.php in SLAED CMS 2.5 Lite allows remote attackers to include and execute arbitrary local files via a .. dot dot in the newlang parameter to index.php...

Directory traversal

Directory traversal vulnerability in update/index.php in Liquid-Silver CMS 0.35, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the update parameter...