CVE-2009-0457: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in AJA Portal 1.2 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter to admin/case.php in the 1 ContactPlus and 2 Reviews modules, and 3 the modulename parameter to...

CVE-2009-0423: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Php Photo Album PHPPA 0.8 BETA allows remote attackers to include and execute arbitrary local files via a .. dot dot in the preview parameter...

CVE-2008-6025: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in scr/form.php in openElec 3.01 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the obj parameter...

CVE-2009-0371: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in post.php in SiteXS CMS 0.1.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the type parameter...

CVE-2009-0330: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Simple Content Management System SCMS 1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter...

CVE-2008-5990: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in connect/init.inc in emergecolab 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the sitecode parameter to connect/index.php...

CVE-2008-5968: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cookielanguage parameter in a phpicalendar cookie, a different vector than CVE-2006-1292...

CVE-2008-5962: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in library/setup/rpc.php in Gravity Getting Things Done GTD 0.4.5 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the objectname parameter...

CVE-2008-5948: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in BNCwi 1.04 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the newlanguage parameter...

CVE-2008-5894: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Mediatheka 4.2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

CVE-2008-5881: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 gatewaymodule parameter to plugin/gateway/gnokii/init.php and the 2 themesmodule parameter to plugin/themes/default/init.php...

CVE-2008-5878: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Phpclanwebsite aka PCW 1.23.3 Fix Pack 5 and earlier, when magicquotesgpc is disabled and registerglobals is enabled, allow remote attackers to include and execute arbitrary files via a .. dot dot in the 1 boxname parameter to...

CVE-2008-5818: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in eDreamers eDContainer 2.22, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lg parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-5776: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Aperto Blog 0.1.1 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 action parameter to admin.php and the 2 get parameter to index.php. NOTE: in some environments, this can be leveraged fo...

CVE-2008-5728: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in AIST NetCat 3.12 and earlier, when magicquotesgpc is disabled and registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the system parameter in modules/netshop/post.php; and the...

CVE-2008-5604: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in My Simple Forum 3.0 and 4.1, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter...

CVE-2008-5291: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in code/track.php in FuzzyLime 3.03 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter, a different vector than CVE-2007-4805 and CVE-2008-3165...

CVE-2008-5201: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in OTManager CMS 24a allows remote attackers to include and execute arbitrary local files via a .. dot dot in the conteudo parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp,...

CVE-2008-5207: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Jonascms 1.2 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the taal parameter to 1 backup.php and 2 gbvoegtoe.php. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2008-4781: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in update.php in MyKtools 2.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the langage parameter...