CVE-2007-1933

Multiple directory traversal vulnerabilities in PcP-Guestbook PcP-Book 3.0 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter to 1 index.php, 2 gb.php, or 3 faq.php...

Directory traversal

Directory traversal vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier allows remote attackers to include arbitrary local files via a .. dot dot and trailing %00 NULL in a mymsroot cookie...

WitShare 0.9 (index.php menu) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================ WitShare 0.9 index.php menu Local File Inclusion Vulnerability ================================================================ """"""""""""""""""""""""""""""""""""""""""""""...

KLA10234 Multiple vulnerabilities in Kaspersky products

Multiple critical vulnerabilities have been found in Kaspersky Anti-Virus and Kaspersky Internet Security. Malicious users can exploit these vulnerabilities to execute arbitrary code or read & overwrite local files. Below is a complete list of vulnerabilities 1. An integer overflow can be exploit...

Directory traversal

Multiple directory traversal vulnerabilities in Really Simple PHP and Ajax RSPA 2007-03-23 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the class parameter to 1 Controllerv4.php or 2 Controllerv5.php...

CVE-2007-1851

Multiple directory traversal vulnerabilities in Really Simple PHP and Ajax RSPA 2007-03-23 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the class parameter to 1 Controllerv4.php or 2 Controllerv5.php...

CVE-2007-1851

CVE-2007-1851 affects Really Simple PHP and Ajax (RSPA) and involves multiple directory traversal vulnerabilities reported for 2007-03-23. The issue allows remote attackers to include and execute arbitrary local files by supplying a ".." in the __class parameter to either Controller_v4.php or Con...

Directory traversal

Directory traversal vulnerability in inc/lang.php in sBLOG 0.7.3 Beta allows remote attackers to include and execute arbitrary local files via a .. dot dot in the conflangdefault parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by...

CVE-2007-1801

Directory traversal vulnerability in inc/lang.php in sBLOG 0.7.3 Beta allows remote attackers to include and execute arbitrary local files via a .. dot dot in the conflangdefault parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by...

CVE-2007-1720

CVE-2007-1720 affects the Addressbook 1.2 module for PHP-Nuke. Vulnerability: directory traversal via .. in the module_name parameter allows remote attackers to include and execute arbitrary local files, demonstrated by injecting PHP sequences into an Apache log file. Public exploits are listed (...

Directory traversal

Directory traversal vulnerability in bbcoderef.php in the Giorgio Ciranni Splatt Forum 4.0 RC1 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. dot dot in the name parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log...

Directory traversal

Directory traversal vulnerability in view.php in MPM Chat 2.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the logi parameter...

CVE-2007-1613

Directory traversal vulnerability in view.php in MPM Chat 2.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the logi parameter...

CVE-2007-1524

Directory traversal vulnerability in themes/default/ in ZomPlog 3.7.6 and earlier allows remote attackers to include arbitrary local files via a .. dot dot in the settingsskin parameter, as demonstrated by injecting PHP code into an Apache HTTP Server log file, which can then be included via...

CVE-2007-1477

CVE-2007-1477 affects PHP Point Of Sale for osCommerce v1.1. The vulnerability is a directory traversal in the index.php file, exploitable via a ".." sequence in the cfg_language parameter, allowing remote attackers to include and execute local files. Documentation notes that the issue has been d...

Path traversal

Multiple absolute path traversal vulnerabilities in Fantastico, as used with cPanel 10.x, allow remote authenticated users to include and execute arbitrary local files via 1 the userlanguage parameter to includes/loadlanguage.php or 2 the fantasticopath parameter to includes/mysqlconfig.php and...

CVE-2006-7132

Directory traversal vulnerability in pmd-config.php in PHPMyDesk 1.0beta allows remote attackers to include arbitrary local files via the pmdlang parameter to viewticket.php...

Directory traversal

Multiple directory traversal vulnerabilities in phpTrafficA 1.4.1, and possibly earlier, allow remote attackers to include arbitrary local files via a .. dot dot in the 1 file parameter to plotStat.php and the 2 lang parameter to banref.php...

CVE-2007-1076

Multiple directory traversal vulnerabilities in phpTrafficA 1.4.1, and possibly earlier, allow remote attackers to include arbitrary local files via a .. dot dot in the 1 file parameter to plotStat.php and the 2 lang parameter to banref.php...

Directory traversal

Directory traversal vulnerability in include/dbconn.php in SpoonLabs Vivvo Article Management CMS 3.4 allows remote attackers to include and execute arbitrary local files via the root parameter...