EUVD-2009-1221

Malware in sbrugna...

webEdition <= 6.0.0.4 (WE_LANGUAGE) Local File Inclusion Vulnerability

No description provided by source. Salvatore drosophila Fresta + Application: webEdition + Version: = 6.0.0.4 + Website: http://www.webedition.de + Bugs: A Local File Inclusion + Exploitation: Remote + Date: 31 Mar 2009 + Discovered by: Salvatore drosophila Fresta + Author: Salvatore drosophila...

webEdition CMS 6.1.0.2 Local File Inclusion

=================================================================== webEdition CMS DOCUMENTROOT Local File Inclusion vulnerability =================================================================== Software: webEdition CMS 6.1.0.2 Vendor: http://www.webedition.org Vuln Type: Local File Inclusion...

webEdition CMS 'WE_LANGUAGE' Parameter Local File Include Vulnerability

webEdition CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view and execute arbitrary local files in the context of the webserver process. This may aid in further attacks. webEdition CMS...

CVE-2009-1222: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in webEdition 6.0.0.4 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary files via a .. dot dot in the WELANGUAGE parameter...