CVE-2008-6734: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Public/index.php in Keller Web Admin CMS 0.94 Pro allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter...

CVE-2008-6726: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in CMScout 2.06, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the bit parameter to 1 admin.php and 2 index.php, different vectors than CVE-2008-3415...

CVE-2009-1319: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in includes/ini.inc.php in GuestCal 2.1 allows remote attackers to include and execute arbitrary files via a .. dot dot in the lang parameter to index.php...

Redaxscript 'language' Parameter Local File Include Vulnerability

Redaxscript is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view and execute arbitrary local files in the context of the webserver process. This may aid in further attacks. Redaxscript 0.2.0 is...

CVE-2008-6659: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Simple Machines Forum SMF 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote authenticated users to configure arbitrary local files for execution via directory traversal sequences in the value of the themedir field during a jsoption action,...

CVE-2009-1222: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in webEdition 6.0.0.4 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary files via a .. dot dot in the WELANGUAGE parameter...

CVE-2009-1090: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the uploaded parameter...

CVE-2008-6410: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in show.php in ol'bookmarks manager 0.7.5 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the show parameter...

CVE-2009-0765: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Kipper 2.01 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the configfile parameter...

CVE-2009-0766: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in default.php in Kipper 2.01 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the configfile parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-6317

CVE-2008-6317 affects PHPMyGallery 1.5 beta. A directory traversal vulnerability exists in _conf/_php-core/common-tpl-vars.php where remote attackers can include and execute arbitrary local files via .. in the conf[lang] parameter. This is the explicit issue described in the CVE entry; no additio...

CVE-2008-6308: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Private Messaging System PMS 1.2.3 and earlier for PunBB allow remote attackers to include and execute arbitrary files via a .. dot dot in the punuserlanguage parameter to 1 functionsnavlinks.php, 2 headernewmessages.php, 3 profilesend.php, and 4...

CVE-2008-6273: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in configurationscript.php in MyKtools 3.0 allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the langage parameter, a different vulnerability than CVE-2008-4781. NOTE: the provenance of this information is...

CVE-2008-6265

Directory traversal vulnerability in portfolio/css.php in Cyberfolio 7.12.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the theme parameter...

CVE-2008-6253: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in data/inc/lib/pcltar.lib.php in Pluck 4.5.3, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the gpcltarlibdir parameter...

CVE-2009-0722: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin.php in Potato News 1.0.0 allows remote attackers to include and execute arbitrary files via a .. dot dot in the user cookie parameter...

CVE-2008-6171: Improper Input Validation

includes/bootstrap.inc in Drupal 5.x before 5.12 and 6.x before 6.6, when the server is configured for "IP-based virtual hosts," allows remote attackers to include and execute arbitrary files via the HTTP Host header...

CVE-2008-6167: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in search.php in miniPortail 2.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lng parameter...

CVE-2009-0515: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in checklang.php in Yet Another NOCC YANOCC 0.1.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

CVE-2008-6074: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in frame.php in phpcrs 2.06 and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the importFunction parameter...