CVE-2026-65754

CVE-2026-65754 concerns the Joomla extension ReReplacer Pro by Regular Labs. The connected sources describe an insecure path handling weakness in the ReReplacer XML include paths, which could allow reading files outside the site directory. The vulnerability is tied to the ReReplacer Pro extension...

CVE-2026-65754

Joomla Extension - regularlabs.com - Insecure path handling in ReReplacer Pro extension - ReReplacer XML include paths could read files outside the site directory...

EUVD-2026-47908

Joomla Extension - regularlabs.com - Insecure path handling in ReReplacer Pro extension - ReReplacer XML include paths could read files outside the site directory...

CVE-2026-65712

The CVE-2026-65712 entry concerns the Joomla Pro extension from Regular Labs. Vulnerability detail: CDN versioning could check file paths outside the site directory, exposing local file existence and modification metadata. This indicates a path handling flaw in the CDN integration that may allow ...

EUVD-2026-40908

The WP-BusinessDirectory plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Deletion in versions up to and including 4.0.1. This is due to insufficient path validation in the remove method of the JBusinessDirectoryControllerUpload class. The task=upload.remove endpoint is...

CVE-2026-6070 WP-BusinessDirectory <= 4.0.1 - Unauthenticated Arbitrary File Deletion via Path Traversal via '_filename' Parameter

The WP-BusinessDirectory plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Deletion in versions up to and including 4.0.1. This is due to insufficient path validation in the remove method of the JBusinessDirectoryControllerUpload class. The task=upload.remove endpoint is...

EUVD-2007-4241

Malware in sbrugna...

USN-4552-3 pam-python regression

USN-4552-1 and USN-4552-2 fixed a vulnerability in Pam-python. The update introduced a regression which prevented PAM modules written in Python from importing python modules from site-specific directories. We apologize for the inconvenience. Original advisory details: Malte Kraus discovered that...

CVE-2018-20159

i-doit open 1.11.2 allows Remote Code Execution because ZIP archives are mishandled. It has an upload feature that allows an authenticated user with the administrator role to upload arbitrary files to the main website directory. Exploitation involves uploading a ".php" file within a ".zip" file...

Nwahy Web Site Dir 2.2 Database Disclosure Exploit

Exploit for php platform in category web applications ================================================== Nwahy Web Site Dir 2.2 Database Disclosure Exploit ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...

Microsoft IIS FTP Server NLST Command Remote Overflow

Added: 09/03/2009 CVE: CVE-2009-3023 BID: 36189 OSVDB: 57589 Background Microsoft Internet Information Server IIS includes a web server and an FTP server. Problem A stack overflow in the FTP server in IIS 5 and 6.0 via a crafted NLST command that uses wildcards allows remote authenticated users t...

CVE-2007-4258

SQL injection vulnerability in directory.php in Prozilla Pub Site Directory allows remote attackers to execute arbitrary SQL commands via the cat parameter...

Sql injection

SQL injection vulnerability in directory.php in Prozilla Pub Site Directory allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2007-4258

SQL injection vulnerability in directory.php in Prozilla Pub Site Directory allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2007-4258

CVE-2007-4258: SQL injection in Prozilla Pub Site Directory’s directory.php via the cat parameter. Remote attackers can execute arbitrary SQL commands. Affected: Prozilla Pub Site Directory (directory.php) with cat parameter. Root cause: unsafely built SQL queries allowing injection. Impact: part...

Prozilla Pub Site Directory (directory.php cat) SQL Injection Vulnerbility

No description provided by source. --==+================================================================================+==-- --==+ Prozilla Pub Site Directory SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR:...

Prozilla Pub Site Directory - Directory.php?cat SQL Injection

Prozilla Pub Site Directory - Directory.php?cat SQL Injection --==+================================================================================+==-- --==+ Prozilla Pub Site Directory SQL Injection Vulnerbility +==--...

Prozilla Pub Site Directory - 'Directory.php?cat' SQL Injection

--==+================================================================================+==-- --==+ Prozilla Pub Site Directory SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: prozilla.com DORK...