CVE-2011-3357: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in bugactiongroupextpage.php in MantisBT before 1.2.8 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter, related to bugactiongrouppage.php...

PT-2011-3992

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 3.4.x through 3.4.3.1 Description A directory traversal issue exists when configuration storage is enabled, allowing remote attackers to include and execute arbitrary local files via directory traversal sequences in a...

CVE-2011-2643: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in sql.php in phpMyAdmin 3.4.x before 3.4.3.2, when configuration storage is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in a MIME-type transformation parameter...

CVE-2011-2718: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the relational schema implementation in phpMyAdmin 3.4.x before 3.4.3.2 allow remote authenticated users to include and execute arbitrary local files via directory traversal sequences in an export type field, related to 1...

CVE-2011-2744: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Chyrp 2.1 and earlier allows remote attackers to include and execute arbitrary local files via a ..%2F encoded dot dot slash in the action parameter to the default URI...

PT-2011-3907

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 3.x prior to 3.3.10.2 phpMyAdmin versions 3.4.x prior to 3.4.3.1 Description The issue allows remote authenticated users to include and execute arbitrary local files. This is possible when a certain MIME transformation...

CVE-2011-2508: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in libraries/displaytbl.lib.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1, when a certain MIME transformation feature is enabled, allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in a...

IF-CMS 2.07 - Local File Inclusion (Metasploit) (2)

IF-CMS 2.07 - Local File Inclusion Metasploit 2 $Id: if-cms.rb 2011-03-15 20:28:10 tecr0c $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

CVE-2011-0505: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in system/system.php in Zwii 2.1.1, when magicquotesgpc is disabled and registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the settemplatevalue parameter...

MeshCMS v3.5 Remote Code Execution Exploit

Exploit for jsp platform in category web applications !/usr/bin/python MeshCMS v3.5 remote code execution exploit Environment: Tomcat 7.02/ubuntu 10.04 1 details: There is a add member/editor/admin CSRF vulnerability in this CMS which is very clean for an attacker. The admin will not be told a us...

EUR Form Client Arbitrary File Execution Vulnerability

Overview EUR Form Client has an arbitrary file execution vulnerability. Impact A remote attacker could execute arbitrary file on the affected system. Solution Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action...

CVE-2010-4330: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in includes/controller.php in Pulse CMS Basic before 1.2.9 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter to index.php...

PT-2010-5482

Name of the Vulnerable Software and Affected Versions Brunetton LittlePhpGallery version 1.0.2 Description The issue allows remote attackers to list, include, and execute arbitrary local files. This is achieved by exploiting a directory traversal vulnerability in the gallery.php file when the mag...

CVE-2010-4406: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in gallery.php in Brunetton LittlePhpGallery 1.0.2, when magicquotesgpc is disabled, allows remote attackers to list, include, and execute arbitrary local files via a ..// dot dot slash slash in the repertoire parameter...

KLA10305 ACE vulnerabilities in RealPage Module Upload

A buffer overflow was found in RealPlayer. By exploiting this vulnerability malicious users can execute arbitrary files. This vulnerability can be exploited remotely via a specially designed MP4 file. Original advisories - Exploitation Related products...

CVE-2010-2797: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in lib/translation.functions.php in CMS Made Simple before 1.8.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the defaultcmslang parameter to an admin script, as demonstrated by admin/addbookmark.php, a different...

CVE-2010-3480: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in ApPHP PHP MicroCMS 1.0.1, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

Fedora 12 : xinha-0.96.1-1.fc12 (2010-9260)

Name: CVE-2010-1916 URL: https://vulners.com/cve/CVE-2009-1916 Assigned: 20100511 Reference: MISC: http://www.php-security.org/2010/05/10/mops-2010-019-serendipity-wysiw yg-editor-plugin-configuration-injection-vulnerability/index.html Reference: MISC:...

CVE-2010-2138: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in ProMan 0.1.1 and earlier allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the SESSIONuserLang parameter to 1 elisttasks.php, 2 managepmanagers.php, 3 manageusers.php, 4 helpfunc.php, 5...

CVE-2010-1999: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in scr/soustab.php in OpenMairie Opencatalogue 1.024, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsnphptype parameter, a related issue to CVE-2007-2069...