CVE-2008-0233: Undefined Security Weakness

Unrestricted file upload vulnerability in Zero CMS 1.0 Alpha and earlier allows remote attackers to bypass intended access restrictions and upload and execute arbitrary files by uploading an avatar file with an accepted Content-Type such as image/jpeg...

CVE-2007-6648: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in SanyBee Gallery 0.1.0 and 0.1.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter...

CVE-2007-6581: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Social Engine 2.0 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the globallang parameter to 1 headeralbum.php, 2 headerblog.php, or 3 headergroup.php; or 4 adminheaderalbum.php, 5 adminheaderblog.php, or 6...

CVE-2007-6475: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the langsel parameter to 1 updater.php and 2 thumber.php...

CVE-2007-6344: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in modules/cms/index.php in Mcms Easy Web Make 1.3, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the template parameter...

CVE-2007-6184: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Project Alumni 1.0.9 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the act parameter...

CVE-2007-6129: Improper Input Validation

Directory traversal vulnerability in scripts/include/showcontent.php in Amber Script 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the id parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share...

CVE-2007-5684: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in TikiWiki 1.9.8.1 and earlier allow remote attackers to include and execute arbitrary files via an absolute pathname in 1 errorhandlerfile and 2 localphp parameters to a tiki-index.php, or 3 encoded "..%2F" sequences in the implanguage parameter to...

CVE-2007-5489: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Artmedic CMS 3.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2007-5465: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in doop CMS 1.3.7 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter to an unspecified component...

CVE-2007-5311: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic Edition 1.07 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the ssuri parameter...

PT-2007-6341 · Phpfreelog · Phpfreelog

Name of the Vulnerable Software and Affected Versions: phpFreeLog version 0.2.0 Description: A remote file inclusion issue in log.php allows remote attackers to include and execute arbitrary files. Recommendations: For phpFreeLog version 0.2.0, at the moment, there is no information about a newer...

CVE-2007-4976: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in viewlog.php in Coppermine Photo Gallery CPG 1.4.12 and earlier allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the log parameter...

CVE-2007-4908: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in AuraCMS 2.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pilih parameter...

CVE-2007-4718: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in inc/lib/language.lib.php in Claroline before 1.8.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

CVE-2007-4585: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in activateuser.php in 2532|Gigs 1.2.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

CVE-2007-4028: Undefined Security Weakness

Absolute path traversal vulnerability in index.php in Webspell 4.01.02 allows remote attackers to include and execute arbitrary local files via a full pathname in the site parameter. NOTE: some of these details are obtained from third party information...

CVE-2006-4169: Undefined Security Weakness

Multiple directory traversal vulnerabilities in the G/PGP GPG Plugin 2.0, and 2.1dev before 20070614, for Squirrelmail allow remote authenticated users to include and execute arbitrary local files via a .. dot dot in the help parameter to 1 gpghelp.php or 2 gpghelpbase.php...

CVE-2007-3505: Undefined Security Weakness

Multiple directory traversal vulnerabilities in QuickTalk forum 1.3 allow remote attackers to include and execute arbitrary local files via a .. dot dot sequence in the lang parameter to 1 qtfcheckname.php, 2 qtfjbirth.php, or 3 qtfjexists.php...

CVE-2007-3082: Undefined Security Weakness

Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the sclanguage parameter...