CVE-2008-2699

Multiple directory traversal vulnerabilities in Galatolo WebManager GWM 1.0 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in 1 the plugin parameter to admin/plugins.php or 2 the com parameter to index.php...

Vulnerability in WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Local file include и Directory traversal уязвимости в WordPress. Уязвимость в файле plugins.php движка. Local file include и Directory traversal: http://site/wp-admin/plugins.php?page=....file.php http://site/wp-admin/plugins.php?page=.....htacces...

cutenews aj-fork <= 167f (cutepath) Remote File Include Vulnerability

=========================================================================================================== DeltasecurityTEAM www.Deltasecurity.ir =========================================================================================================== Portal Name : cutenews aj-fork Class =...

CVE-2006-4557

CVE-2006-4557 affects Bob Jewell Discloser 0.0.4, specifically the plugins/plugins.php file. The vulnerability allows remote code execution via a URL in the type parameter, with ongoing dispute about whether the attacker can actually control type. The CVE notes partial/conditional impact and that...

MyBB 1.2 Local File Incusion

Invalid characters removed from From: [email protected], |@securityfocus.com, D3vil-0x1 MyBB Bug Local File Inclusion MyBB 1.2 - Admin Can Include Local File : File :- admin/plugins.php Line :- 51 // if$mybb-input'action' == "activate" $codename = $mybb-input'plugin'; Input From POST $file =...