Gentoo Security Advisory GLSA 200701-11 (horde-kronolith)

The remote host is missing updates announced in advisory GLSA 200701-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Chilkat XML - ActiveX Arbitrary File CreationExecution

Chilkat XML - ActiveX Arbitrary File CreationExecution ----------------------------------------------------------------------------- Chilkat XML ActiveX Remote Arbitrary File Creation/Execution url: www.chilkatsoft.com File: ChilkatUtil.dll = 3.0.3.0 CLSID: 5022FAE8-B780-4B78-B8DC-1AF1145A4F42...

CVE-2008-3195

CVE-2008-3195 affects TWiki prior to 4.2.3. The bin/configure script is vulnerable to directory traversal via the image parameter in installation steps, allowing read access to arbitrary files and potentially code execution. Public records (exploitdb, Debian security advisory DSA-1639-1, OpenVAS ...

CVE-2008-3195: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in bin/configure in TWiki before 4.2.3, when a certain step in the installation guide is skipped, allows remote attackers to read arbitrary files via a query string containing a .. dot dot in the image variable, and execute arbitrary files via unspecified vectors...

CVE-2008-3851

CVE-2008-3851 affects Pluck CMS 4.5.2 on Windows, enabling local file inclusion via directory traversal in index.php through parameters to data/inc/themes/predefined_variables.php and data/inc/blog_include_react.php (and their blogpost/cat variants). Root cause involves improper input handling th...

CVE-2008-3600: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in contrib/phpBB2/modules.php in Gallery 1.5.7 and 1.6-alpha3, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the phpEx parameter within a modload action...

CVE-2008-3568: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in fckeditor/editor/filemanager/browser/default/connectors/php/connector.php in UNAK-CMS 1.5.5 allows remote attackers to include and execute arbitrary local files via a full pathname in the Dirroot parameter, a different vulnerability than CVE-2006-4890.1...

CVE-2008-3562: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in the Contact module in Chupix CMS 0.1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mods parameter. NOTE: the provenance of this information is unknown; the details...

CVE-2008-3564: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in index.php in Dayfox Blog 4 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 p, 2 cat, and 3 archive parameters. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC...

CVE-2008-3405: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Ricardo Amaral nzFotolog 0.4.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the actionfile parameter...

CVE-2008-3371: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter...

CVE-2008-3363: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in userportal.php in the Dokeos E-Learning System 1.8.5 on Windows allows remote attackers to include and execute arbitrary local files via a ..\ dot dot backslash in the include parameter...

CVE-2008-3385: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in include/headchat.inc.php in php Help Agent 1.0 and 1.1 Full allows remote attackers to include and execute arbitrary local files via a .. dot dot in the content parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a U...

CVE-2008-3384: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in help/help.php in Interact Learning Community Environment Interact 2.4.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 module and 2 file parameters...

CVE-2008-3333: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in core/langapi.php in Mantis before 1.1.2 allows remote attackers to include and execute arbitrary files via the language parameter to the user preferences page accountprefsupdate.php...

CVE-2008-3296: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in modules/system/admin.php in XOOPS 2.0.18 1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the fct parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-3312: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in lemonincludes/FCKeditor/editor/filemanager/browser/browser.php in Lemon CMS 1.10 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the dir parameter. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-3192: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in jSite 1.0 OE allows remote attackers to include and execute arbitrary local files via a .. dot dot in the module parameter...

CVE-2008-3036: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in CMS little 0.0.1 allows remote attackers to include and execute arbitrary local files, and probably remote files, via a .. dot dot in the template parameter...

CVE-2008-2976: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in TinX/cms 1.1, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 language parameter to a includeme.php, b admin/ajax.php, and c...